Viruses in search results. [Archive]

hopalong

February 6th, 2009, 06:02 PM

This occurs almost in every search, and easy to see them, when there is no or only a few normal result.
-clicking on From shows nothing (no users, only a little point at the lower left corner of the From field - this point disappears if I click anywhere)
- "view file info" aka properties shows the users
-they looks as spam for me
In this test I got two results,
(Such a result is with 1-6 users, and the user count grows in every research.)
-1st result: Bitzi shows "house music ministry of sound 2009.mp3" and "contains a virus don't download"
-2nd result: Bitzi shows nothing
-I can download them
For both AVG free shows "Trojan horse Downloader.Wimad.F"

I think LW have to filter them out automatically.

Aaron.Walkhouse

February 6th, 2009, 06:37 PM

If they are showing up in every search, post the hashes here. :cool:
Those are just bugged wma files and not viruses, but an annoyance nonetheless.

hopalong

February 6th, 2009, 07:28 PM

If they are showing up in every search, post the hashes here. :cool:
Those are just bugged wma files and not viruses, but an annoyance nonetheless.

As you can see from my original message:
For both AVG free shows "Trojan horse Downloader.Wimad.F"
they are trojans,
and they are mp3 files - see AVG free scan result: "MARTIN CIRCUS - Rockabilly baby.mp3";"Trojan horse Downloader.Wimad.F";"Infected",
this is not only annoyance - this is a big problem.

It's not easy to get the hashes: LW doesn't allow (why, can anybody tell ?) to copy from the properties of the file, I have start Bitzi and copy it from start line.

Here they are:

S5EQCXPCMPXGZKWIGSKUIGQWMCHLAZU5
YYGFKVJRYBEYGQVTC5EWGB66LNBZS5CM

This is how LW filters out the viruses, trojans, etc ? You will make a file similar to hostiles, but with sha1 values ?

And why does LW the following:
This occurs almost in every search, and easy to see them, when there is no or only a few normal result.
-clicking on From shows nothing (no users, only a little point at the lower left corner of the From field - this point disappears if I click anywhere)

hopalong

February 6th, 2009, 07:46 PM

If they are showing up in every search, post the hashes here. :cool:
Those are just bugged wma files and not viruses, but an annoyance nonetheless.

I have filtered out already .wma files. Before this I got many "bugged" wma. What can I do with them ? The junk filter doesn't work. Never worked.

Aaron.Walkhouse

February 6th, 2009, 08:16 PM

Those "mp3" files are actually bugged WMAs with the wrong extension.
It's a simple tactic to elude blocking by filename extensions.

For a quicker way to get hashes, right-click and save a magnet link to the clipboard.
The hash is prominent in those links because they need it to do their magnetic thing.

LimeWire 5 has added the capability to broadcast the worst of the spam hashes.
Take a peek in limewire.props to see today's set.

Don't forget to use BitCollider to submit YYGFKVJRYBEYGQVTC5EWGB66LNBZS5CM to Bitzi. :cool:

hopalong

February 6th, 2009, 09:18 PM

Those "mp3" files are actually bugged WMAs with the wrong extension.
It's a simple tactic to elude blocking by filename extensions.
OK, understand

For a quicker way to get hashes, right-click and save a magnet link to the clipboard.
The hash is prominent in those links because they need it to do their magnetic thing.

Sorry, in the search results the right click menu only contains "download", "mark as spam" and "view file info". But in the file properties "copy link" puts the magnet link into clipboard.

LimeWire 5 has added the capability to broadcast the worst of the spam hashes.
Take a peek in limewire.props to see today's set.
My hashes are not there. The spam from the previous days are stored and accessed in a remote database? How LW will filter these two hashes ? You will post a new hostiles.zip file. In the the previous weekend I found much more - can I send the hashes here in a message?

Thanks

Don't forget to use BitCollider to submit YYGFKVJRYBEYGQVTC5EWGB66LNBZS5CM to Bitzi. :cool:
OK, I did it.

Aaron.Walkhouse

February 6th, 2009, 09:31 PM

hopalong

February 6th, 2009, 09:55 PM

Post your hashes here only if they are the type that come up in fake search hits and
the person in charge of such matters will broadcast them to every LW5 node remotely,
It's in everyone's best interests to block those pests globally, hence the new feature.
To this I have to know what is a fake. I search for example the meaningless qqqqwwwwzu and some similar things: most of the results are fake, as i can see from the equal columns, and equal hash values. For me it's fake, even if doesn't contains a trojan, virus, ... and I would post them for you.
Can I define and use in LW a local fake list file ?

Aaron.Walkhouse

February 9th, 2009, 09:44 AM

I think the idea is to block the pests that pollute every search, so it doesn't
matter what they are as long as they are spoofed to all searches.

hopalong

February 9th, 2009, 10:42 AM

I hope one or two month enough for this idea to come true, and then a constant maintenance will be necessary presumably.

Aaron.Walkhouse

February 9th, 2009, 12:02 PM

Daily scans and an equally quick response will be needed for this particular class of pest.
The best part is that any pest that speeds up his efforts to bypass this new form of global
blocking will stand out statistically and be easy to detect by IP address and other factors.

hopalong

February 9th, 2009, 12:10 PM

hopalong

February 9th, 2009, 12:29 PM

Here is a new one I got:

266 KB
VID4ST6MLUJAJMIXLFOEG73E73RMFID4
It was already in Bitzi
[YOUR SEARCH TERMS KeyGen.exe...Generic12.XAC.TROJAN

It's an mp3, audacity shows it, mostly in red and not in blue color (the the sound is overcontrolled - I don't know how have to say that too loud).

Aaron.Walkhouse

February 9th, 2009, 06:48 PM

http://bitzi.com/lookup/VID4ST6MLUJAJMIXLFOEG73E73RMFID4

That's actually a program and It apparently isn't being spammed anymore.
Looks like it hasn't been seen by anybody else. There's only one report on it.
Is it showing up with your search terms now?

hopalong

February 9th, 2009, 07:16 PM

I'm just testing half an hour, and I got no virus, probably the filtering works. Great ! (Or are the spammers are sleeping ? - I don't think)

I've got that virus only one time. It was already on Bitzi, and didn't make a report.

Can you help something, I've some little problem with the junk filter.

Thanks.

hopalong

February 9th, 2009, 07:25 PM

Hm, I see that LW accepted now my ultrapeer setting made in the morning, maybe that's why I don't get now viruses ? And I get some search results ?

Aaron.Walkhouse

February 9th, 2009, 09:49 PM

The latest filter updates must have gone out by now. All the ones we identified are now blocked.
The lack of spam hits should stop our searches from running out before finding the real files.

hopalong

February 10th, 2009, 07:37 AM

This was a fast solution,
but here is a new one: 3.92MB
AVG scan shows "Trojan horse Downloader.Wimad.F";"Infected"
6RI7CNEHLPIS6DWQV4LSY3TVVUY64Z43

and another one:

AVG: "Trojan horse Generic_c.SJA";"Infected"
MOESTFBBOUE3262PCHGQQBHWRY3XTT53

Bitzi is too busy, I can't go there

It seems, that the spammers see, that nobody downloads them, and they made new ones.

Both trojan added to Bitzi

Aaron.Walkhouse

February 10th, 2009, 03:49 PM

Part of Bitzi crashed sometime last night. I sent an email to Giordon and he fixed it right away.

The frequent changes are no surprise. Hopefully the process can be streamlined for quicker updates.

hopalong

February 10th, 2009, 04:11 PM

That's good.

hopalong

February 12th, 2009, 08:28 AM

After a free day here is a new one:

1.99MB PIDKRF3YJDFHYGLSBEG6IKLCCOUD3MUH

Jotti's malware scan shows 4 hit, NOD32 says
Found a variant of WMA/TrojanDownloader.GetCodec.gen

I've added to Bitzi.

Aaron.Walkhouse

February 12th, 2009, 11:01 PM

Another bugged WMA leading to trojans on a driveby download site.

VYY6QLMMPGXDPGWTVEWMIEAJW6CYTYON
"*(Club MIX).mp3" is 3,905,934 bytes (3.7 MB) in length

Aaron.Walkhouse

February 12th, 2009, 11:09 PM

To protect yourselves from these trojan web sites, block these ranges in your firewalls:

66.212.18.0 - 66.212.18.255
82.98.193.0 - 82.98.193.255
85.17.138.0 - 85.17.138.255
87.236.193.0 - 87.236.195.255
94.75.214.0 - 94.75.214.255

I'll add more as they pop up. Yesterday's site already vanished but blocking these ranges permanently
will make it much more expensive for these criminals to change sites.

Aaron.Walkhouse

February 12th, 2009, 11:34 PM

RGM25O6FBMINI6F5LLUV3MJHRBSOU5E7
"*.wma" 22,867 bytes (22.3 KB)

6L7TMIY55DUT7Z5OJGSUP4DMSHVOKDHJ
"* 2009.mp3" 1,010,769 bytes (987.1 KB)

hopalong

February 13th, 2009, 05:42 AM

To protect yourselves from these trojan web sites, block these ranges in your firewalls:

I've added these to my Zonealarm PRO as Blocked IP ranges.

Is this a better solution as the blocking with the IPs in hostiles.txt or with PeerGuardian?

Aaron.Walkhouse

February 13th, 2009, 08:57 AM

You have two layers of protection, firewall and in LimeWire. Both work differently and are
at different privilege levels. Use both and you block these guys both ways, making both
more efficient.

I'd get rid of ZoneAlarm anyway. They never did get that one up to speed for heavy duty
work like P2P.If you do that you can get Comodo or Outpost and load real blocklists into
that layer too.

If you really want coverage with efficiency you can add ProtoWall or PeerGuardian 2 and
let the mainstream firewall concentrate on higher level stuff like cookies and scripts.
Since both operate differently at completely separate levels of the OS, you can even have
both and still use only a few percent with all four layers running in four different corners
Each divide up the job with the best features and let slower stuff sit idle, wasting no time
and little space.

Top layer is the list inside LimeWire, next is PG2 grabbing more traffic at the application
layer, then the firewall [the slowest part], does scripts and stuff and the bottom layer,
ProtoWall, sits with the kernal as a device driver in Ring Zero, catching inbound traffic from
the higher threat levels. All of these still work in both directions, so you have some
efficient backup if any layer fails. With shielding in both directions, the firewall ends up
doing less work. The list in LimeWire stops outbound traffic before it can start. All
together it scales so well you can run more than one ultrapeer and still download at
reasonably high speeds.

hopalong

February 13th, 2009, 09:52 AM

First, I say thank you for the long explanation.

You have two layers of protection, firewall and in LimeWire. Both work differently and are
at different privilege levels. Use both and you block these guys both ways, making both more efficient.

OK

I'd get rid of ZoneAlarm anyway. They never did get that one up to speed for heavy duty
work like P2P.If you do that you can get Comodo or Outpost and load real blocklists into that layer too.

I will look into them, but I'm just renewed ZoneAlarm PRO.

If you really want coverage with efficiency you can add ProtoWall or PeerGuardian 2 and let the mainstream firewall concentrate on higher level stuff like cookies and scripts.
Since both operate differently at completely separate levels of the OS, you can even have both and still use only a few percent with all four layers running in four different corners
Each divide up the job with the best features and let slower stuff sit idle, wasting no time and little space.

I'm using already PeerGuardian 2, I've removed the ranges from Zonealarm and put them into a block list in pg2.

I've found many discussions about using ProtoWall and PG2 together, somebody says they work together, others say the don't work together, somebody says enough one, others says 2 is better then 1.

For now I remain at PG2 only. As I see, it blocks many incomings : Mediadefender, Whittaker are coming in always.

hopalong

February 13th, 2009, 07:11 PM

Here is a new one, after waiting hours for LW to download:

3.38 MB 44W5KJA4VPE7QCQXVG73VRN5XNSHN6C7
NOD32: variant of WMA/TrojanDownloader.GetCodec.gen

Bitzi doesn't work, can't add.

I got this one only one time, maybe you made a scan after this occurred here ?

Aaron.Walkhouse

February 14th, 2009, 04:12 AM

Looks like Bitzi's working now.

Aaron.Walkhouse

February 14th, 2009, 06:16 AM

OT4CZEJ656W2OI3EULSHK4TUFJ7YUKUC
"* - greatest hits.mp3" 3,129,713 bytes (3.0 MB)

hopalong

February 14th, 2009, 06:35 AM

2.98 MB OT4CZEJ656W2OI3EULSHK4TUFJ7YUKUC
Jotti's malware scan shows 4 hit, NOD32 says:
Found a variant of WMA/TrojanDownloader.GetCodec.gen
already in Bitzi

Aaron.Walkhouse

February 14th, 2009, 07:33 PM

Missed it by 19 minutes. http://www3.telus.net/Aaron_Walkhouse/tongue3.gif

hopalong

February 14th, 2009, 07:37 PM

Maybe you have to scan to times a day - but this one causes no problem. How do you know this 19 minutes ?

Aaron.Walkhouse

February 14th, 2009, 08:12 PM

I scan a lot more than two times a day. Look at the bottom of page 3 in this thread. http://www3.telus.net/Aaron_Walkhouse/tongue3.gif

hopalong

February 14th, 2009, 08:38 PM

OK, I see, the message date.

hopalong

February 15th, 2009, 11:39 AM

Aaron, I posted them already for you, don't forget (because they are coming)

3.38 MB 44W5KJA4VPE7QCQXVG73VRN5XNSHN6C7

2.98 MB OT4CZEJ656W2OI3EULSHK4TUFJ7YUKUC

both are a variant of WMA/TrojanDownloader.GetCodec.gen

Aaron.Walkhouse

February 15th, 2009, 09:47 PM

Like I said, updates will be speeding up as it becomes part of the routine.
I would assume that those who do this bit are out for the weekend. http://www3.telus.net/Aaron_Walkhouse/tumbleweed.gif

hopalong

February 16th, 2009, 06:31 AM

Sorry, I forget about the weekend always since I am a pensioner.

hopalong

February 16th, 2009, 11:54 AM

Here is a one:

3.64 MB JP4ZIM4NTXUBIX2A6COETI3PI3EDOEWD
Jotti's malware scan shows 4 hit, NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen - I've added to Bitzi.

hopalong

February 17th, 2009, 06:37 AM

Here is again 3.38 MB 44W5KJA4VPE7QCQXVG73VRN5XNSHN6C7

I get it only one time for more searches, then no more. The result count is 1, but the download is very fast, many uploaders.

Aarion, can't you find this ?

Aaron.Walkhouse

February 17th, 2009, 08:26 AM

I'm doing trojans at the moment. ;]

hopalong

February 17th, 2009, 08:46 AM

did / will you find this ?

3.02 MB 5N6RI3XCOHHCOYCPXILGAAZGB66H5GO5 Jotti's malware scan shows 4 hit, NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen 4 - I've added to Bitzi.

Aaron.Walkhouse

February 18th, 2009, 04:50 AM

hopalong

February 18th, 2009, 05:15 AM

Those are bugged .wma files which you only find when searching for music.
Right now I'm finishing up a major worm that has been spreading for months.
Since it's only in .zip files, I'm not seeing the music-related spam today.
OK, Aaron, thanks.
You know, I only search for audio.
I should like to search for audio albums including images, in zip and rar files, and wma files too, but I filtered out these categories. What do you think, is it worthy to try them, does your filtering work well for these categories ?

Aaron.Walkhouse

February 19th, 2009, 12:01 AM

Definitely. I try to cover everything I can.

hopalong

February 19th, 2009, 01:54 PM

Here's the 1st from the wma's:

22 KB U3AWGC2A7WOBZO6AMFR4SKNOASXHTNEU Jotti's malware scan shows 7 hit, NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen 5 - already in Bitzi: gods promise ellis paul folk.wma

and an old one from 2009.02.17 is again here:

3.02 MB 5N6RI3XCOHHCOYCPXILGAAZGB66H5GO5 Jotti's malware scan shows 4 hit, NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen 4 - I've added to Bitzi.

hopalong

February 20th, 2009, 09:48 AM

Aaron, Don't you find these 3 old ones - they are coming today too:

22 KB U3AWGC2A7WOBZO6AMFR4SKNOASXHTNEU Jotti's malware scan shows 7 hit, NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen 5 - already in Bitzi: gods promise ellis paul folk.wma

3.02 MB 5N6RI3XCOHHCOYCPXILGAAZGB66H5GO5 Jotti's malware scan shows 4 hit, NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen 4 - I've added to Bitzi.[/QUOTE]

3.38 MB 44W5KJA4VPE7QCQXVG73VRN5XNSHN6C7 Jotti's malware scan shows 4 hit, NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen 2

new wma (or wmv ?) files: all three is already in Bitzi, Jotti's malware scan found nothing.

1.27 MB URWOQOTZWAPXEKJ37FQMFV7K5RYKVQNJ
1.32 MB WWXWAL6B2KOMKMASCJF6WLLAM4GNULSX
1.32 MB 4KNYFULC53G3BGRBRZF3JNMQ7H32UNBE

Aaron.Walkhouse

February 24th, 2009, 07:25 AM

TDJKN3DDTPS43H4WXXUEQDBODEU6FAGT
*.htm, 119 bytes

This one has been around for a while. It lures the victim to a trojan download on a notorious Malaysian
hosting provider called Piradius. This same company hosts many of the fake codec and fake media
player trojans that are spammed on gnutella. As a precaution, perhaps the whole range should be
blocked with the internal list.

PIRADIUS-NET:124.217.224.0-124.217.255.255

I recommend that everyone put this range in their firewalls so that they don't accidentally open a web
page on any of their many trojan-infected sites and become infected with those trojans.

Aaron.Walkhouse

February 24th, 2009, 09:06 AM

SHeur2.OUQ.TROJAN

NM2W7RLDU6BNJKILEZW2Q2XX63X6FTII
UCZB27OSRFBPTIN2G4OHKR5CQUCQSZWO
WDX6U4FCMEW6FOFZ4SEORQUO2SVADU7G
5RDRYSVJOWSO2C5XMC4C7LVHGF5JKH7V
ZQGEOAMRESDAW33URNBXYNJTKIV7EIXW
TDKIUOJZYMKE6WSACXFQ5CYXGC2ELUBZ
QS3TUGOI3ZGAI6NTG57RQKMYSZWPJOP2
AO2RMR3SEV2ZXLSFKFZHJTBPRBFUNQJE

This one is extremely prolific and apparently targets LimeWire nodes.

hopalong

February 24th, 2009, 11:11 AM

Thanks Aaron !

Is any reason that this is here yet ? I've posted it 10 days ago.

3.38 MB 44W5KJA4VPE7QCQXVG73VRN5XNSHN6C7

And here is a new:

3.11 MB 37UCMFVIDPNMN7NIZ2OQ5RAW4QPUO2TU
Jotti's malware scan shows 6 hit, NOD32 says:
Found a variant of WMA/TrojanDownloader.GetCodec.gen

Aaron.Walkhouse

February 24th, 2009, 09:46 PM

BS6STUSIRIRTF7OJYT2TF2G7LAUTTFXI
*.mp3 3,263,249 bytes (3.1 MB)

Another getcodec spam.

hopalong

February 24th, 2009, 09:51 PM

And again one - they love me !

3.11 MB BS6STUSIRIRTF7OJYT2TF2G7LAUTTFXI

Jotti's malware scan shows 4 hit, NOD32 says:
Found a variant of WMA/TrojanDownloader.GetCodec.gen - I've added to Bitzi.

hopalong

February 24th, 2009, 09:53 PM

You were faster - I watched Dr. House in the TV

Aaron.Walkhouse

February 24th, 2009, 10:24 PM

I don't watch TV.
Advantage: Axeman. http://www3.telus.net/Aaron_Walkhouse/tongue3.gif

hopalong

February 25th, 2009, 07:52 AM

What does axeman mean here ?

Aaron.Walkhouse

February 25th, 2009, 09:35 PM

I'm slaughtering those trojans by the thousand and blocking their sites. http://www3.telus.net/Aaron_Walkhouse/vinsent.gif

bsmith1051

February 26th, 2009, 07:33 PM

SHA1 = 4OS25GDNQY776FPAKVXGXUG7RFXIDYTU
3.1 MB .mp3

Seems like there's a lot of 'different' 3.1 MB infected files?

Aaron.Walkhouse

February 26th, 2009, 07:49 PM

bsmith1051

February 26th, 2009, 08:10 PM

LOPHCDCGO7QC3WEVI5WKLIDJMDIHB2PF
4.4 MB .mpeg, but it looks like it's really an infected WMA

hopalong

February 26th, 2009, 08:15 PM

Hey Aaron, I have those IP ranges, But I got this too:

3.41 MB 4OS25GDNQY776FPAKVXGXUG7RFXIDYTU
Jotti's malware scan shows 4 hit, NOD32 says:
Found a variant of WMA/TrojanDownloader.GetCodec.gen - I've added to Bitzi.

bsmith1051

February 26th, 2009, 08:15 PM

These are put out daily by criminals to get people to download their trojans. I posted a list a few days ago of IP ranges to block in firewalls so that you don't accidentally connect to their trojan sites. If you have PeerGuardian my lists show up in there too.
So does that mean the new LW5 doesn't automatically know how to identify these?

Also, what does the built-in "Mark as Spam" function do? Does it report the IP and hash to HQ, or does it simply setup a (probably ineffective) filter on the local machine?

hopalong

February 26th, 2009, 08:23 PM

So does that mean the new LW5 doesn't automatically know how to identify these?

Also, what does the built-in "Mark as Spam" function do? Does it report the IP and hash to HQ, or does it simply setup a (probably ineffective) filter on the local machine?

This junk filter doesn't really work ( oh yes, I know, it works for everybody), doesn't watch (only) the hash value - it's a game only.

There's no virus engine in LW5 - as I know Aaron find them, and somebody make them known to LW5. It's a hard work.

hopalong

February 26th, 2009, 08:47 PM

an old devil in new dress:

449 KB VC5RP6DJ4OX6TQWHI7UJTFXBAXUDPQ67

AVG shows Trojan horse Downloader.Generic_c.ADO
already in Bitzi: cute girl has orgasm on webcam.asf

Aaron.Walkhouse

February 26th, 2009, 11:46 PM

That's an old one. Is it still showing up in forged search hits?

Here's another getcodec file

2OKQYWN6FPKVOLCL2Y5M5VCEHTD6IFLZ
*.mp3, 45,432 bytes (44.3 KB)

hopalong

February 27th, 2009, 06:24 AM

That's an old one. Is it still showing up in forged search hits?

It was in the search results yesterday. I don't understand the "forged" word here.

Here's another getcodec file

2OKQYWN6FPKVOLCL2Y5M5VCEHTD6IFLZ
*.mp3, 45,432 bytes (44.3 KB)

I don't get this. Funny.

Aaron.Walkhouse

February 27th, 2009, 07:04 AM

Is it showing up in a ereply to searches with your search term added to the filename?
That's a forged search hit.

That 44.3K file is the same as the other mp3 files you have been finding.
Jotti's scan gives the exact same "WMA/TrojanDownloader.GetCodec.gen" result.

hopalong

February 27th, 2009, 08:18 AM

Is it showing up in a ereply to searches with your search term added to the filename?
That's a forged search hit.

This was: my search term + two guys ... *** [*******].mp3 - as I remember.

probably doesn't like that words - I have to look in dictionary - OK. I understand.

I found this just now:

4.30 MB P2SPBA5RGQBEBMBFOI3PHBZXQO4CLNTN
Jotti's malware scan shows 6 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen 9
Bitzi is experiencing technical difficulties

Aaron.Walkhouse

February 27th, 2009, 08:43 AM

I alerted Gordon to the crash and he's working on it.
This one looks like it will take more time than usual.

hopalong

February 27th, 2009, 07:22 PM

That's an old one. Is it still showing up in forged search hits?

Here they are again (30-31 hosts) :

449 KB VC5RP6DJ4OX6TQWHI7UJTFXBAXUDPQ67

hopalong

March 3rd, 2009, 05:56 AM

Here is a new one:

3.05 MB EZBL6HVDZQW3Q2C5HQIUO64RWR2IC4X4
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen 10
I've added to Bitzi.

hopalong

March 5th, 2009, 02:34 PM

3.24 MB 3H6K5Z3UJHODDCAFKKADLVQKOT5W6LUY
Jotti's malware scan shows 8 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen 11
I've added to Bitzi.

hopalong

March 6th, 2009, 09:43 AM

3.15 MB IX7UOX3ALP5RDR2JLTCFR25IZGDTT7MJ
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen 12
already in Bitzi: son of dork.mp3

hopalong

March 6th, 2009, 07:16 PM

hopalong

March 7th, 2009, 07:16 AM

The following mp3's occur only 1 time, can't download them and probably there are more from them:

118 KB FHUSL77AXSUXPA52FR7E575ZNQ4SEQDJ
118 KB 43YUP7YRMR63WTN2KXIXKVYXT2AXAOUM
118 KB 5HQZLXJVZ3K7CAQ7CBJO7JDIG4FI5XWE
118 KB OUM3GLH322ZK5AYQO65M467FLN6VXIXZ
118 KB VTVW5T5UU4RVF3NHWRNZLN6COAWC5JRT
118 KB YOHCUO6SFMKLB7I63P4TGXWVCUUJCWBB

Today I downloaded the 1st two, added to Bitzi, Jotti's scan shows nothing.

another one

2.44 MB RNXDJ4RPCNIKIRBXLYXGG6BSVSIMMJ7X
Jotti's malware scan shows nothing
already in Bitzi: a victim song michael paynter.mp3

I think, size or IP filter needed to 118 KB spams

hopalong

March 7th, 2009, 12:30 PM

Here are some new :

118 KB PBLBOKTI6GMO4QCVWPANMS2JJITDVGGP
118 KB JHXKAOXFGZ3SVO4X3KCPFLHS4VUCN4U5
118 KB IGW66ECIUVNXNQK7VVXF7ZB6L56PZL2H
118 KB ZRHO2IG6MDPUIMKQSAWF2P5MFQHYOLBQ
118 KB 6PIWADQDE5GFLXXN5XOWO243AZHB7V3D
118 KB WZX5PNU76MAAVMB36VBWWWRAQYWHL6VW

Aaron.Walkhouse

March 7th, 2009, 10:06 PM

What's the exact size of those 118K files? I'll start a targeted search.

hopalong

March 8th, 2009, 05:42 AM

Here is my directory for them:

╔══════════════════════ D:\My Music-Virus ═══
║► UP-DIR ◄│..
║ 120531│118 1.mp3
║ 120531│118 10.mp3
║ 120531│118 2.mp3
║ 120531│118 3.mp3
║ 120531│118 4.mp3
║ 120531│118 5.mp3
║ 120531│118 6.mp3
║ 120531│118 7.mp3
║ 120531│118 8.mp3
║ 120531│118 9.mp3

The 1st column is the size in bytes.

hopalong

March 8th, 2009, 10:56 AM

Here are some new from the 118

118 KB CPIRLGVBOKOM567EINHOV2FY34B6QF4P
118 KB RYBJQQONY4QU6IABFRRCUQIEMKEDJL2V
118 KB TOS6UYVIRKAQRQ2EUVWSRJYVEFFGD3PG
118 KB AQRDJZZYPF3ACAOVGB4645F2KCPBRW3N
118 KB 2YLNLIMQ34AXSKLG2YHRHUIG6IWB2BRY
118 KB UQEKG4M3HN6O5GYSVKTXLLG72INLZGGS
118 KB YOHCUO6SFMKLB7I63P4TGXWVCUUJCWBB
118 KB VTVW5T5UU4RVF3NHWRNZLN6COAWC5JRT

and the old

2.44 MB RNXDJ4RPCNIKIRBXLYXGG6BSVSIMMJ7X
3.15 MB IX7UOX3ALP5RDR2JLTCFR25IZGDTT7MJ

are coming yet

hopalong

March 10th, 2009, 06:52 AM

Here is the full list of the 118 KB files I got:

118 KB FHUSL77AXSUXPA52FR7E575ZNQ4SEQDJ
118 KB 43YUP7YRMR63WTN2KXIXKVYXT2AXAOUM
118 KB 5HQZLXJVZ3K7CAQ7CBJO7JDIG4FI5XWE
118 KB OUM3GLH322ZK5AYQO65M467FLN6VXIXZ
118 KB VTVW5T5UU4RVF3NHWRNZLN6COAWC5JRT
118 KB YOHCUO6SFMKLB7I63P4TGXWVCUUJCWBB
118 KB SDLN35T4S6A57YDLQLTJFTHSU7PCF4XP
118 KB 7OFCN2NFAGMV5SRRMRHNLBEXTNMYY5Q2
118 KB PBLBOKTI6GMO4QCVWPANMS2JJITDVGGP
118 KB JHXKAOXFGZ3SVO4X3KCPFLHS4VUCN4U5
118 KB IGW66ECIUVNXNQK7VVXF7ZB6L56PZL2H
118 KB ZRHO2IG6MDPUIMKQSAWF2P5MFQHYOLBQ
118 KB 6PIWADQDE5GFLXXN5XOWO243AZHB7V3D
118 KB WZX5PNU76MAAVMB36VBWWWRAQYWHL6VW
118 KB CPIRLGVBOKOM567EINHOV2FY34B6QF4P
118 KB RYBJQQONY4QU6IABFRRCUQIEMKEDJL2V
118 KB TOS6UYVIRKAQRQ2EUVWSRJYVEFFGD3PG
118 KB AQRDJZZYPF3ACAOVGB4645F2KCPBRW3N
118 KB 2YLNLIMQ34AXSKLG2YHRHUIG6IWB2BRY
118 KB UQEKG4M3HN6O5GYSVKTXLLG72INLZGGS
118 KB WSE5KR5UMCBKUFMMUECLNK67RTXHCNEN
118 KB 7FIKWMPBCF5ITR7LKBQLT55KNIJRXTBU

I get now only from this, no other.

Aaron.Walkhouse

March 10th, 2009, 11:56 AM

I found a few of those. That's just ifreeclub spam again. The Bill Clinton impersonator ad.

hopalong

March 10th, 2009, 12:30 PM

Hm, this spam has many life.

Aaron.Walkhouse

March 10th, 2009, 01:29 PM

They've been at it since 2000 and some of their older files still come up once in awhile.

hopalong

March 11th, 2009, 09:50 AM

again a getcodec:

3.06 MB SYUX7LLIYUBT3VRT7OZHRLE3PFGVDYWJ
Jotti's malware scan shows 7 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
already in Bitzi: chris trapper.mp3

Aaron.Walkhouse

March 11th, 2009, 11:33 AM

hopalong

March 11th, 2009, 01:01 PM

Please take care to post exact sizes in bytes from now on. Predictable filename patterns,
such as "[echoed search keywords] - new version.mp3" will also be needed. The staff have
to be able to produce rules to match these files accurately with the lowest probability of false
positives so that they can investigate and confirm any reports of spam or malware before they
can go ahead and block any files reported by anyone, even trusted people like us.

OK

To make the reporting a little bit easier, I propose to make two modifications to the "View File Info ..." "File Properties" window:

make the "Size:" and "Hash :" fields suitable to copy and paste the values to the report, just as filename is now, and display the file size in bytes (too?) (the "copy link" feature is not the best to use for the hash value - the result string is very long if there's for example 10 users under "location").

This way the reporter could see the values to be reported in one place in appropriate format.

I do not believe it's a big work to do, and disturbs nobody on this secondary window.

hopalong

March 11th, 2009, 03:06 PM

Here is two new impersonator again:

120531 CTILX637HREFREBTI7CP434BZSTH6GRO
[echoed search keywords].mp3

120531 XGB7BAZ3YF67HPT5B3ZBKL3NUAL7V375
[echoed search keywords].mp3

I see 6 other from these already reported - what is with these ?

Some of them with underscore and not blank separator, as usual.

hopalong

March 11th, 2009, 03:20 PM

I already reported
3209657 3.06 MB SYUX7LLIYUBT3VRT7OZHRLE3PFGVDYWJ

It has two format:
[echoed search keywords].mp3 or
<some prefix> [echoed search keywords] <a real title>.mp3

In this case <some prefix> is "Misc. "

hopalong

March 11th, 2009, 06:17 PM

Here is two new impersonator again:

120531 4YWCSSTXNYBOCASF4M6PGGRP25JQBZ4B [echoed search keywords].mp3
120531 S3MWZQNTSGITHB2BZ5NEZE56NWVGZ2UZ [echoed search keywords].mp3

hopalong

March 11th, 2009, 06:36 PM

I don't understand, I reported this already in http://forum.limewire.org/showpost.php?p=19909&postcount=67
and here is it again:

4506738 P2SPBA5RGQBEBMBFOI3PHBZXQO4CLNTN [echoed search keywords] MTV-Top100.mp3

hopalong

March 11th, 2009, 07:13 PM

Here is two new impersonator again:

120531 VMEYDXZP4EVD4TOELU7I2VYOHFJKNQIO [echoed search keywords].mp3
120531 JD2IOACLSD65EH7DEA3SE6STXZ5CXBXL [echoed search keywords].mp3

hopalong

March 11th, 2009, 07:56 PM

The impersonators are coming and coming,

you have to find a general solution,

I won't report these, hereafter.

Aaron.Walkhouse

March 12th, 2009, 01:28 AM

Keep on reporting them. You don't have to report repeats unless the
previous report didn't have enough info for a match in followup searches.

hopalong

March 12th, 2009, 06:18 AM

Keep on reporting them. You don't have to report repeats unless the
previous report didn't have enough info for a match in followup searches.

OK,
here is from yesterday two not reported:

120531 VW5RH2YX7HXDXH4QSP4MKUD7K6B45V47 [echoed search keywords].mp3
120531 I4WNLJDASD4EBVFTSCVMRXQOH6PTZPEP [echoed search keywords].mp3

The interesting thing with these is, that "From" is always "1 P2P user" and hard to download them.

hopalong

March 12th, 2009, 09:53 AM

It's seems they are coming in a pair:

120531 O7SFVSANVQL6LK5DKJJJW65XBT4SASIL [echoed search keywords].mp3
120531 P3W65Y2TUG2G4HKZ4PLANUWJRYMUQH5A [echoed search keywords].mp3

Aaron.Walkhouse

March 12th, 2009, 11:09 AM

LimeWire is starting to reject them. That's why the number of sources is dwindling.
Pretty soon the spammers won't be able to hide at all and I'll be gathering the last
of their hidden IP addresses.

hopalong

March 12th, 2009, 11:24 AM

I could send you the user info, like GrumpyAnchoby 103-90, you probably can turn it into real IP - but I don't know what is the "hidden IP".

hopalong

March 12th, 2009, 12:05 PM

GrumpyAnchoby 103-122 : every host sent two

Aaron.Walkhouse

March 12th, 2009, 12:36 PM

They have been using hacked versions of LimeWire to spread their stuff.
One of the hacks is to send only the IP addreses of other people, but
now that their servers are being isolated their own Ip addresses are
starting to show up in hits.

I can't translate those LimeWire encoded addresses yet but let's start
saving them up when we see groups like that one.

hopalong

March 12th, 2009, 01:08 PM

OK

Two new:

120531 VIZMDATAJA5JHDCKVV3ALZGSVCVQMZF7 [echoed search keywords].mp3 GrumpyAnchoby103-193
120531 Q5WTKLVM5EJISPTWPC54KSKFM6JES3Q2 [echoed search keywords].mp3 GrumpyAnchoby103-193

and a new host: PinkCap82-113

hopalong

March 12th, 2009, 06:31 PM

Here is new getcodec:

3424177 7XL5HTABB6TOLSCZ4WVFP7UWQ4B4XAYC [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 7 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

March 13th, 2009, 01:41 PM

These I've reported already, but they are coming yet. They are 1-6 day old.

all is: [echoed search keywords].mp3

120531 TOS6UYVIRKAQRQ2EUVWSRJYVEFFGD3PG
120531 AQRDJZZYPF3ACAOVGB4645F2KCPBRW3N
120531 XGB7BAZ3YF67HPT5B3ZBKL3NUAL7V375
120531 CTILX637HREFREBTI7CP434BZSTH6GRO
120531 O7SFVSANVQL6LK5DKJJJW65XBT4SASIL
120531 P3W65Y2TUG2G4HKZ4PLANUWJRYMUQH5A
120531 IGW66ECIUVNXNQK7VVXF7ZB6L56PZL2H
120531 ZRHO2IG6MDPUIMKQSAWF2P5MFQHYOLBQ

hopalong

March 16th, 2009, 07:26 PM

It was a good weekend,
but now here is a new getcodec:

3434600 FGPW23T4AMHE6ND44WZPIS6Q7DVTFVM4 [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"

Jotti's malware scan shows 7 hit,
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

March 17th, 2009, 06:30 AM

3430177 245MPHUBGBJIYH7MILF3PQYE3ARN5AFP [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 7 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
already in Bitzi

hopalong

March 19th, 2009, 06:55 AM

This one looks like a trojan, but can't download it:

4188670 WO3TFLUTBPYD5XSH5Y5YTXWSVQNRWGMD
[echoed search keywords](Club RMX).mp3
not in Bitzi

Aaron.Walkhouse

March 19th, 2009, 01:04 PM

I see a bunch of those ones now. It looks the same as
another trojan downloader that has alreasy been reported.

hopalong

March 19th, 2009, 01:18 PM

I didn't get anything. We are far from each other ?

Aaron.Walkhouse

March 19th, 2009, 04:55 PM

I'm in Canada and I use BearShare for spam and malware hunting, so yes and no for both reasons.

Location isn't really important on gnutella but the odds are higher I'm hitting a different set of nodes.

BearShare is on the same network but my access to non-limewire nodes is better and I have more
precise search tools and the ability to search for hashes directly, not to mention the ability to switch
back and forth between ultrapeer and leaf modes at will.

I have six more of those files but not the one you found and a seventh is not finished yet.
It look like these are fakes put out to just identify downloaders and waste their bandwith.
They have no malware aspect and are just short clips of uncompressed PCM (waveform)
of a fragment of some forgettable pop music number.

The profile is as you described, [keywords](Club RMX).mp3 and exactly 4,188,670 bytes long.
The format is ASF and the contents are PCM audio. No metadata is present.

Hashes so far are:
KZP3MK4HA4Q453B5CIDSBZW32BEQLZCO
WWGNGJ3SHFS23A566JMI6ZKYUNSAELFV
2VH7RHB7QWJXS74YI3QCT4AT4WEUUIR5
4K4XJ5PZEUP5FZGR7TJH4CMIYHJ7VPKP
QVI7DIN2G5HN6OIJV2EQIRGGTNWLFNNG
VTB5HWRHPPCX6PQTI2VA2SAXSSAUPC2A
LKZMW5RUQ6WEALNQMENA3KGCRZ4EE7BL

hopalong

March 19th, 2009, 06:07 PM

I'm in Canada and I use BearShare for spam and malware hunting, so yes and no for both reasons.

Location isn't really important on gnutella but the odds are higher I'm hitting a different set of nodes.

BearShare is on the same network but my access to non-limewire nodes is better and I have more
precise search tools and the ability to search for hashes directly, not to mention the ability to switch
back and forth between ultrapeer and leaf modes at will.

I used to remove my UPs to get others, and 3 or 4 times on a day restart LW - sometimes it goes to UP mode.

It look like these are fakes put out to just identify downloaders and waste their bandwith.
They have no malware aspect and are just short clips of uncompressed PCM (waveform)
of a fragment of some forgettable pop music number.

It's interesting, that I can't download this one, and don't find yours.

The format is ASF and the contents are PCM audio. No metadata is present.

OK, I checked up ASF and PCM audio, I didn't know about these - how do you know what is the format and content ? With the help of some program ?

Aaron.Walkhouse

March 20th, 2009, 01:36 AM

I use two, [GSpot Codec Information Appliance] (http://www.headbands.com/gspot) and [AVIcodec] (http://avicodec.duby*******).

hopalong

March 20th, 2009, 09:01 AM

Thanks the info.

Here is a new getcodec:

3428740 A4WTNBHOVDX45EZNEKN6XUQYUAETPN7P [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 7 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
already in Bitzi, I've rated

It would be desirable in the file properties window, to widen the filename column under location next to address - there is place, or make it horizontally scrollable, to able to see the full filename.

hopalong

March 22nd, 2009, 07:41 AM

Here is new getcodec for the weekend :

2517108 OBY5Z7WO7WKTEDMNFGZC3MEIHWD3LDW3 [echoed search keywords][suffix].mp3
suffix is empty
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

March 24th, 2009, 09:02 AM

Today I found a user with 8 files of size 120531 in a browse host.

I've downloaded the one not known for me by hash, it was

120531 662VGHMBOQ5XTWWLY3DLLGAAET5VPISF
already in Bitzi (added by erakun at 2008-02-20) as iFree Club SPAM.232.mp3

Aaron,

Don't you think, that LW ought to filter out these already known spams in a browse host (view files) too, not only at search ?

Aaron.Walkhouse

March 24th, 2009, 09:43 AM

Not really. I use browsing to catch that stuff.
Browsing should show everything, though filtered files could be marked as spam.

hopalong

March 24th, 2009, 10:09 AM

Not really. I use browsing to catch that stuff.
Browsing should show everything, though filtered files could be marked as spam.

I agree, the marking is enough - something like the already in My Library icon was for me in this case.

hopalong

March 25th, 2009, 09:13 AM

A new getcodec:

3259657 JZ6MWARAGKB2H46US2OTRGXDQL67XCVO [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 8 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

March 28th, 2009, 09:26 AM

A new getcodec:

3429177 HFWWZ5DALR53QLFBM333JPFB5SOQVWUI [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 10 hit, NOD32 says:
Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

March 29th, 2009, 12:10 PM

This weekend's gift for us:

3438178 XHR6YLYML6OXJZKOHZRTYBAMQO623P45 [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 8 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

March 30th, 2009, 09:52 AM

A new getcodec:

3436774 FO3VFZMTIY62DTWYA4NP2XWNRXQYQTEI [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 8 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

March 31st, 2009, 10:09 AM

A new getcodec for today:

3437617 DQFJY2M7VKUBUDTRRC3FNAIXN3HEZ22K [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 10 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

April 1st, 2009, 10:32 AM

and one onto the fools' day ...

3430251 46MOFQBQH5AEGKRMPFZ6B4XSJFZ663QA [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 9 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

April 2nd, 2009, 06:37 AM

no day without a new getcodec:

3436878 QMIAA3DYWESFL7Z2UCGUUILN4FEYSVAU [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 9 hit, NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

April 2nd, 2009, 08:06 PM

The 2nd for today:

3431300 JQIYDBLJCBGS64KFWQSGEUO5GR7K67XH [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 8 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

April 3rd, 2009, 08:21 PM

GetCodec:

3431239 5FWIMFZOE7FWXWREQQKLQZFG2PSN5IIW [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 8 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

April 4th, 2009, 06:30 AM

another getcodec

3429377 4DNGLMT3SN7IO4DPDDWJU3QC2GNJID7F [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 10 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

April 5th, 2009, 10:42 AM

I found this getcodec already yesterday, but the forum didn't work

3437481 EF3NOKIORZ7GAVKGKKKD7YFDGQAFGTZV [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 8 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

hopalong

April 6th, 2009, 07:23 AM

3405158 OGJWLX7F6HSFE2YELJGU32IQW73YXSIK [echoed search keywords][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I've added to Bitzi.

Aaron.Walkhouse

April 6th, 2009, 10:52 AM

You may as well leave out the numbers from the filenames when
you submit to Bitzi. The extra info is already in view on the same
page and the extra data could be confusing to inexperienced users.

I recently submitted a batch, some of which you started. Take a
look at what I did and see if you like it. ;]

hopalong

April 6th, 2009, 02:06 PM

I tried to modify my last one "3405158 OGJWLX7F6HSFE2YELJGU32IQW73YXSIK [echoed search keywords][suffix].mp3" in Bitzi.
I've added the other filenames.
How can you give to a filename a rate value .7 ?
I modified the rate to "Spammed on gnutella with your own search terms and connects you to a malicious trojan-laden website."
I think the "connects you to a malicious trojan-laden website." text corresponds to this getcodec, but generally I don't know what does a virus/trojan do.
Please look into this entry in Bitzi.

Aaron.Walkhouse

April 6th, 2009, 08:32 PM

That's pretty good. Remember that these have to be valid filenames.
In this case I added the special case extension ".TROJAN"

Most tags can be rated for accuracy.
Check the small coloured scale at the
top right of many of the tags.

Trojans have many purposes, all bad. I didn't bother to check what this
one does but your antivirus might have a link to a database somewhere.

hopalong

April 7th, 2009, 08:07 PM

Here is a new getcodec:

3402979 RCJIOHFL2HTL3VG5S3ZLLZ4L4H6OUSO4 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as [YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

Most tags can be rated for accuracy.
Check the small coloured scale at the
top right of many of the tags.

For me -- makes -2.2, - makes -1.1, blank makes 0, + makes 1.1, ++ makes 2.2, ? doesn't work. How can you enter .7 ?

Aaron.Walkhouse

April 7th, 2009, 08:55 PM

Ratings average out as people rate tags. In that case I downrated by one so that the
new filename would float to the top. Gordon gave us the formula in the Bitzi General
Discussion a while back when we were dealing with a troll, so maybe I can find it again.
When dealing with that troll I sometimes pumped them up past 12 so that he couldn't
mess with them. ;]

hopalong

April 8th, 2009, 06:35 AM

Thanks,

but here is a new one:

3411932 NXMLDNEISVPHGTTCOXYJFNPNXVFXSUJN [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 8th, 2009, 10:46 AM

and another one:

3406212 WLUOB6SVDGNJ4RBWX4O56D2XOPDP3WTK [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 8th, 2009, 05:25 PM

The second getcodec here:

3410243 2N6DP5BAIN5HQ36HXXIRE32CBRY742GF [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 9th, 2009, 08:23 AM

A new getcodec:

3403720 N7FS4TUT5XR42VPSI6F7ZQ4DVQ5J4FTQ [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 9th, 2009, 05:39 PM

Again a getcodec:

3409860 TVD7LVRX4C5SZWTHICJZSZEPF7TPJ2QJ [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
I can't access Bitzi now, I will add this later !

Added to Bitzi on 2009.04.10 as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN

and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

Aaron.Walkhouse

April 9th, 2009, 08:18 PM

I left a message for Gordon in case he didn't know it went down.

Aaron.Walkhouse

April 9th, 2009, 10:20 PM

This explains the outage.

http://www.mercurynews.com/topstories/ci_12106300

It should be back up in a few hours or less. I see some
progress on restoring the network but Bitzi itself is still down.

Aaron.Walkhouse

April 10th, 2009, 02:55 AM

Okay, it's back. Fire away. ;]

hopalong

April 10th, 2009, 05:51 AM

Everything is stolen here, what is a metal or cable or anything, because they can get money. Approximately two months before were a very long halt in half of the country because of this. The cabling - as many other thing - is very centralized here.

hopalong

April 10th, 2009, 06:07 AM

Here is a getcodec for today:

3402406 HYXO6V5QAN6RLVVONP6FITNFTUKOUYYF [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 10th, 2009, 06:17 PM

and an other one:

3402559 ROW3LR5TQIUZUJYSE4UQIX4SZLY6JZ2L [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen 33
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 11th, 2009, 08:48 AM

3404217 CMHE2HDBQD6NR5RKZNYRK76AGIN7NX5D [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 11th, 2009, 01:56 PM

3411806 7X5UXM6ONMA23J2KOATX53YVSC4QF6VD [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN

and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

Aaron.Walkhouse

April 12th, 2009, 01:32 AM

YJ64ZYJDGS62LMXNOCXDIUWGEVWWUQ3D 22,870 bytes

[YOUR SEARCH TERMS].wma

Another Downloader.GetCodec.gen.WMA.TROJAN

Aaron.Walkhouse

April 12th, 2009, 01:55 AM

DWCAIMKW27JNSKHOCUZXJRMOZGW5FRUU

3,292,074 bytes

[YOUR SEARCH TERMS].wma

hotstuffbox.com WMA spam

hopalong

April 12th, 2009, 05:45 AM

3408912 YOVAONHHJYFCNPKGNF34ERPRJBWEOVSA [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 12th, 2009, 05:35 PM

3405747 BOKWVEAA7XB36UERAHO7KWVHMQUFCRPH [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 13th, 2009, 05:42 AM

3407266 7JRH6PRWUG4R3YYXRJ5NPVZNKSFS4GOB [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 13th, 2009, 02:03 PM

3403692 LQCI5UPZ2RGOUTRMQCAYPOAFPCTXWWH3 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 13th, 2009, 09:00 PM

3403387 IPVA6CDMMJCJBHSCETNRE4YVNJHIBY75 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen 40
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 14th, 2009, 05:40 AM

3405531 LZAVU5BXP6GXCM3O4GIULRFQCHR6OFSO [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 14th, 2009, 09:03 AM

3405496 NISIKL5PCZ6KOU4ZQKEMBP4EVEJA6RSR [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 14th, 2009, 09:27 AM

4415841 TGMXB45CLZITJLCTVQUXETFI6YAFWEJJ [YOUR SEARCH TERMS][new single].au
Jotti's malware scan shows 9 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
already in bitzi as
[your search terms] (rare cover).au
heavy t bumper faye ann lyons [new album].au
Added
[YOUR SEARCH TERMS].au a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS][new single].au

hopalong

April 14th, 2009, 03:05 PM

3409239 XVWXRCDYBAUB3DJL4XR6U4OWCKO6P32W [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 9 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 14th, 2009, 06:15 PM

3408502 UC5GXJHOAWVRY4GIYDH66FTBMHNCMF2C [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 14th, 2009, 09:28 PM

3409805 NRMKVYKIY4WIDNA7R2G3HORGHYDRQ73O [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 15th, 2009, 05:34 AM

3405544 SYZ7A2O26QYKUWXZBCQEQEIUMFW2T6BE [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 15th, 2009, 08:39 AM

3410630 UHKTZQOP4QZ7YRCFICIILV3HBORQUNQC [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 15th, 2009, 03:47 PM

3404228 PH6T24BKJIY3T4A2TXQCEHJXKSMVE6HQ [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 15th, 2009, 04:44 PM

3409352 SDXIOB4KMGIHO5CBUJRKDIVP4ONNJ34S [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 4 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

Aaron.Walkhouse

April 15th, 2009, 08:23 PM

BDXH3FHGMNLP5PVKLTOBEYA6KMJMYCKK

3,292,075 bytes (3.1 MB)

[YOUR SEARCH TERMS].wma

SPAM from hotstuffbox.com 78.129.233.96
Site redirects to a wide variety of ads.

Aaron.Walkhouse

April 15th, 2009, 09:09 PM

5M3AV63LMFVKNZKUKSZD5F6WVSHCPFH7
AKGFBVMCYOA2XGWWY6X4FJQTC5WO6WD6
G5LNPGAWHHWCIEMXHRF44IJ3ZV5A23PU

395,264 bytes (386.0 KB)
396,800 bytes (387.5 KB)

KEYGEN FOR [YOUR SEARCH TERMS] PRO v.2.12.exe

Dropper.Delf.IK.TROJAN

This is the worm that's pounding the GWebCaches to death right now.
It impersonates LimeWire and returns fake search hits to spread itself.

Aaron.Walkhouse

April 15th, 2009, 09:29 PM

AWNXAWJYWMXMWAW5WAQM7O5POCYWMHIX

3,412,047 bytes (3.3 MB)

[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

WMA/TrojanDownloader.GetCodec.gen

Aaron.Walkhouse

April 15th, 2009, 09:36 PM

6WH2Q5KFCLXVAPNDF4L66D335AQPP6BB

42,512 bytes (41.5 KB)

[YOUR SEARCH TERMS].rar

Win32.Virtumonde.VIRUS

fbrader4

April 15th, 2009, 09:46 PM

hopalong

April 16th, 2009, 05:31 AM

3407507 J2ZED7QOVD4O5JHK535ZC66UMCWB7E6F [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 16th, 2009, 08:41 AM

3409649 2SXQUWK4EUGIHXSJC6DMKEXJAMSEHDXA [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

Aaron.Walkhouse

April 16th, 2009, 11:28 AM

How do you delete it from your computer if you get it? Can't go into documents and do it yourself, computer won't let you. Any suggestions? My son's computer has a virus we can not seem to get rid of.If you boot into Safe mode the thing might be defenceless.
Here's a tool I keep handy for that kind of thing too: Unlocker (http://ccollomb.free.fr/unlocker/)

hopalong

April 16th, 2009, 01:59 PM

3408448 EYNIYNN5DAVH65TJWURUNXLT3TRDZCE3 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 16th, 2009, 05:41 PM

3408162 TWAUX3IU3B4S3FVBZHQ5T4RYJG3RDAMF [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 17th, 2009, 05:23 AM

3409162 CPO4R4NH3ID3AGUYH3V6VJRAD2EBGSYG [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 17th, 2009, 10:06 AM

3405921 LQIBVQLQOU322NVYJBK5M7OH355QBA35 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 17th, 2009, 12:53 PM

3404696 TNNCWHOXECPALL62PZ23ACTBP2GQINMB [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 17th, 2009, 05:02 PM

3403530 WMXTFBJ4I6EQYPMXEQ2OAQ5R2LIKZHAV [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

jackovitch

April 17th, 2009, 08:21 PM

is it the bitrate that is supposed to end in an even number. i only ask bcause i was just about to download some stuff that looked ok, then i noticed that some of the intended downloads were odd numbers, an im sure i saw a note onL/W that said all bitrate nos were even and divisble by 8, or am i wrong.assistance please. bitzi had no info. host no was217 129 139 71 46003

Only A Hobo

April 17th, 2009, 08:57 PM

The usual bitrates are 128, 162, 192, 256 and 320 .. all divisible by 8 however there are files with variable bitrate (VBR) and these are identified by a single bitrate number which could be almost anything, so does not necessarily indicate a bad file. I am sharing some VBR files showing as 135, 138, 144, 151 etc.

jackovitch

April 18th, 2009, 04:59 AM

thanks for info an your time.

Lord of the Rings

April 18th, 2009, 05:06 AM

The majority of my audio shares are VBR. It's better than the standard CBR. I also share several hundred apple lossless & FLAC files which give a much higher bitrate than the standard 320 maximum.

On another topic, I was using a different gnutella program which listed a number of spam files as auto files, eg: snd_auto_file or mpg_auto_file, etc. These are possibly dangerous files. But seems LW does not have ability to detect this file type it seems.

I know nothing about auto_files. All I could find googling it was some excerpts here about some programs that can create them:
Auto Files allows you to automate a variety of tasks on your computer. It runs from your system tray and provides the graphical equivalent of a batch programming language to define the details of jobs you want to automate. A point-and-click, wizard-style interface allows you to choose from a wide range of actions. These actions, which are all handled internally by Auto Files, include FTP, email, zipped backups, printing, message display, window manipulation, and send keys. Of course, you can also select external programs to run. Events can be scheduled with a timer, launched with a hotkey, or set to run when specific system changes trigger the event. Other features include logging support and the ability to define custom variables. Auto Files is capable, easy to use, and includes a number of examples to help get you started.

Auto Files is an universal program you can use to automate, facilitate and to speed up your daily work. Expand the possibilities of your computer! For example, you can use Auto Files for: auto-download/upload by FTP/HTTP; auto-send/check E-Mail messages; auto-backup files; auto-synchronize folders; auto-run programs; auto-delete temporary files; auto-shutdown; auto-start/stop Windows NT services; as alarm-clock; and lot more...

Auto Files is an unusual program that allows you to automate a variety of tasks on your computer. It runs from your system tray and provides the graphical equivalent of a batch programming language to define the details of jobs you want to automate. A point-and-click, wizard-style interface allows you to choose from a wide range of actions. These actions, which are all handled internally by Auto Files, include FTP, email, zipped backups, printing, message display, window manipulation, and send keys. Of course, you can also select external programs to run. Events can be scheduled with a timer, launched with a hotkey, or set to run when specific system changes trigger the event. Other features include logging support and the ability to define custom variables. Auto Files is capable, easy to use, and includes a number of examples to help get you started.
X... enables you to automate any combination of tasks on your computer, ranging from simply launching applications, to checking email, moving or backing up files to uploading or downloading, sending email and much more. The program allows to easily create simple task, as well as highly complex automations, involving conditional IF/ELSE statements, loops, custom variables and other advanced options.
Just a few minutes with X will give you plenty of ideas of how you can increase your productivity.

BTW I do like the way that gnutella program gives the host's approx. upload capability.

hopalong

April 18th, 2009, 06:03 AM

3410405 3HLMVITH52I7LPYGEBXC7UYJQCV7WYPA [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 18th, 2009, 09:43 AM

3406631 FVAR4UQI3HXG2VYEDYWFOG4D6C37N2Z3 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 18th, 2009, 02:16 PM

3408477 DC3ICZYKGKB4CGCWL3ACNN7GWG4P37Z2 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 18th, 2009, 05:37 PM

3410433 42WUVAPCZXPRCVJ7S6XZKELTJGGZNFX5 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

Aaron.Walkhouse

April 19th, 2009, 02:34 AM

L2SMTT7VXIPHL7DY2ZCCR6ZU4JBYSHMX
385,767 bytes (376.7 KB)

[YOUR SEARCH TERMS] (+ serial by ROR).zip
[YOUR SEARCH TERMS] [including keygen by ROR].zip
[YOUR SEARCH TERMS] [incl crack by ROR].zip

Downloader.Win32.Tracur.TROJAN

hopalong

April 19th, 2009, 05:40 AM

3409275 DESD2U56AVK3TC4WRAK2ATQ2VNAO6TFO [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 19th, 2009, 10:33 AM

3406440 DMMGUIR3VFYOGGSVXOOEOQB7NI2FFH73 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 19th, 2009, 12:46 PM

3402411 IVO4ATLENODSUL25VMVNJYA5XOQF753V [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 19th, 2009, 05:22 PM

3411684 47BN6IKAIHXYKF5TW3Z7YRNH5WNK5HKW [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 19th, 2009, 10:06 PM

3411609 EYCDDHBJQYQVD6FWCARX7Z7OGYFXYAZB [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 20th, 2009, 05:09 AM

3407270 TWN2FKJUQ64KYQUERGYZGVSO3PNLNQ74 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 20th, 2009, 09:41 AM

3404567 U6Z2EOPLTMMCV2U4YQLNXNNUAVCOW5G6 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
Jotti's malware scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 20th, 2009, 01:42 PM

3408904 IXIDPOR5ZWATM4HTMO7TSBHRAZHVT3MW [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan2 shows 10 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 20th, 2009, 05:43 PM

3409650 MKPYYVJ4YUNK4IW5THEYKYBIUQYLXSPA [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hit
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 20th, 2009, 09:22 PM

3410852 KAXDZXKYYAEOZZIEO7KRMNNWCJBYN2RG [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

Aaron.Walkhouse

April 21st, 2009, 02:38 AM

WTDPIUI7KRK67K4OXNSD4LJNZN6BGS4U
3,292,076 bytes (3.1 MB)

[YOUR_SEARCH_TERMS].wma

hotstuffbox.com.WMA.SPAM

hopalong

April 21st, 2009, 05:24 AM

3411675 QLLRANADWRAFRSKOA6H5FHARWYIQHF7P [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 21st, 2009, 08:48 AM

3411397 MBP5A2F72NX72VWRMVC337LE4X7XYTBP [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 21st, 2009, 12:44 PM

3407610 XISU6JMRHKGATS2WIKR2STZI5UZ7GTTA [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 21st, 2009, 04:46 PM

3402742 GBLVKH3Q3KGGUQXESOGG5C2VIBKNRX72 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 21st, 2009, 09:04 PM

3404559 3HLEWJA55E42FF2GIGX5PPTNXX2U2TER [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 4 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 22nd, 2009, 06:09 AM

3411916 6JRBEMDTRTQM63ZRATJVZRMRK22SKO6C [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 4 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 22nd, 2009, 12:09 PM

3410591 STSPJXQZ6T42I7G7MEKBDL6ZLFEXH64R [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 4 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 22nd, 2009, 01:26 PM

3405787 IGLRPSWUBN2B7YSZF7EUZQDUBUTVQSBH [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 4 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 22nd, 2009, 05:33 PM

3408335 LNHZRO3TJ7UW3VPRJNWNA3IPMNGZ4MFF [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 4 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 22nd, 2009, 09:07 PM

3408000 D2AVJ2R6XXNUUYHI7Q3K3TDLTVRVNSQ4 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 4 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

xcav8r369

April 22nd, 2009, 09:52 PM

I got sick of all that crap. Some one told me about Peerguardian2 by Phoenix Labs.
I have it running on Vista 32 and it works beautifully. I can't even believe all the crap it keeps blocking. My download speeds increased, too.
If anyone needs help with it, message me. Otherwise it's here. (http://forums.phoenixlabs.org/search.php?searchid=1666350)
Don't forget to load the additional BlockLists (http://iblocklist.com/lists.php)
If you run Vista 32, make sure you
1. ALWAYS run it as Administrator and 2. Download the Vista Loader.

As it says on their site - it's FREE and you run it at your own risk.

I've been running it problem free.

hopalong

April 23rd, 2009, 05:18 AM

3407119 U2MFRU2SHCQR2BHX4ZRZVCEVCLRU4PRZ [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 4 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 23rd, 2009, 10:42 AM

3402658 6RMGH4HSBWKBGYIKNDXX33QGAR4IBVTP [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 4 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 23rd, 2009, 10:50 AM

hopalong

April 23rd, 2009, 10:51 AM

hopalong

April 23rd, 2009, 10:52 AM

hopalong

April 23rd, 2009, 04:22 PM

3410139 Y7HW6AQVV3RABUVWLWLLVUTX36XAAUX7 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 4 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 23rd, 2009, 06:02 PM

3407833 NWRVKOCKI7SEBCYQUVJOSKXLHW4BWOX5 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 4 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 23rd, 2009, 08:51 PM

3407614 UE3IDFSC6UUG5AD4RO3HBSFIU2ML4AL6 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 24th, 2009, 05:21 AM

3402967 QRAYZFRT3VZWUEDRS3PARHZ42363KHX3 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 24th, 2009, 09:13 AM

3408124 75JWQQ5MT3KPZIF645YCNL4RWFX2SHY2 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 4 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 24th, 2009, 09:38 AM

120531 N2RJ7P5476MAZRRGMAJK75Q36A7PHX6V [YOUR SEARCH TERMS].mp3
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 iFree Club SPAM
and
[YOUR SEARCH TERMS].mp3

120531 YESYZJC237H2QJE4GGRL6HMYO5OWZ4KQ [YOUR SEARCH TERMS].mp3
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 iFree Club SPAM
and
[YOUR SEARCH TERMS].mp3

hopalong

April 24th, 2009, 03:37 PM

3405624 7AVQ3UCIUEM6ESFIZD2KLQLT2ZVOWRNP [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 24th, 2009, 07:18 PM

3409349 OFYVCBJRYIOSKOI7WA2K7AXNRJ3OQ44S [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 24th, 2009, 09:17 PM

3408164 FLWCWX6YM45TNZXLHZYMPSQ746LZUSFN [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 25th, 2009, 05:49 AM

3409147 3DKAAL722D6QNSR3XDRKAEI4GBVUWB35 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 25th, 2009, 09:28 AM

3411715 JLXI7MFDQ2WW7SEGP25CJVPZUBQZ7AIY [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 25th, 2009, 02:25 PM

3409687 4N22SRPZXFQLWX4LAVLLPDFZXPTG35ZY [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 25th, 2009, 06:00 PM

3408390 VUQENHOANG3JIUUXEO6OGN6SNLNGCS6Y [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3
-------------------------------------------------------------------------
4223976 BF7EDCWQ3K6FJVSVQM5HICUCBWF2M4J5 [YOUR SEARCH TERMS]-HQ.mp3
scan shows 9 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
already in bitzi as
[YOUR SEARCH TERMS] CD quality.wma
Dangerous/Misleading by erakun at 2008-12-16 23:57:53.0 !!!!!!!!!!!!!!!!!!!
added
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS]-HQ.mp3

hopalong

April 25th, 2009, 08:59 PM

3405429 D4CG3REP6KOKV3DLO2AI3HPJ6KIPAPAL [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
and
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 26th, 2009, 05:16 AM

3410047 SD7TYU7FNML4W6ESPKYTI7PZXBCW3BRE [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 26th, 2009, 10:21 AM

3406911 RJODL7XMFSIQPISXKS5I6OE2SKIPD36T [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 26th, 2009, 01:03 PM

3410514 CYT445SCWZJUSVYRDL7LCK3IOHAKTVTO [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track.mp3

hopalong

April 26th, 2009, 05:50 PM

3404873 4HX5X2XGYFCAHLFL6DQ5YNORAXFRHRYL [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 26th, 2009, 08:45 PM

3405064 YSLDIKCTCG7VAISJXUH7G4FN4BYFFWZB [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 27th, 2009, 05:50 AM

3404204 7HJGGTGJRCJVF2YK2MOIHC77JSCJFADN [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 27th, 2009, 10:09 AM

3404064 4TKT4ROBPJ4E7TLVITVBGZNRY2IXOODD [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 27th, 2009, 02:12 PM

3404429 Z2GVUZ3Z7XPQKU5KC7EBOQMESH3M6A67 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 27th, 2009, 05:26 PM

3412320 AX3GH7P4XQHXVRLJOV26RUQJDCOGOQJM [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 5 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

Aaron.Walkhouse

April 27th, 2009, 06:49 PM

PTR7QVFTFIUPFL4YLNMWDPK2J64ROKBE
2,289,446 bytes (2.2 MB)

cute cheerleader teens at home toy f ucking pussies...[A lot of spaces to hide the rest]...[YOUR SEARCH TERMS].avi
........................(Space added by me ^)

Downloader.GetCodec.gen.WMA.TROJAN

hopalong

April 27th, 2009, 08:36 PM

3545427 CDO2CWLDJAQZBY57SGPTPMLQZWZSLL77 [YOUR SEARCH TERMS].mp3
scan shows 11hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
already in bitzi as
katchafire.mp3
WHEN I'M GONE--(by 3 Doors Down): FAKE!! TROJAN DROPPER
dont walk away.mp3
WMA:Wimad[Dpr]
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3

hopalong

April 27th, 2009, 09:03 PM

3411887 3MBG4AJ6OEZIJ6YOTO4B2UM5OII662R7 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 6 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 28th, 2009, 05:27 AM

3410999 VOIB2UJ2ZA2PYTGMELYDXMF4QDZXLVR7 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 28th, 2009, 10:54 AM

3405395 W7IVNLEZEPBGQF2QOX6BPRQEA66JG24V [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 6 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 28th, 2009, 01:32 PM

3410726 FHMPW5MQBKJLVLIZL5UGHGTU5PPD5WRH [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 6 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 28th, 2009, 07:06 PM

3408663 TEP52XMNV6CRBNWUX2FJP44R4DNMVBIR [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 6 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 29th, 2009, 06:45 AM

3407597 OZ46FMNRJZAFS3LVKSMVLJKDFBSNQ2DH [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 6 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 29th, 2009, 09:52 AM

3408431 R56TXRYGSRBBR6BN6WAYEII54JVT4MMD [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 6 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 29th, 2009, 01:56 PM

3404276 TF45ETVCDUFIGPJQWF26T6C3FHZV2AW3 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 6 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 29th, 2009, 05:20 PM

3405451 YDMJ5UIJ52DEXRYNDOAL55CSHIKENLN5 [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 6 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

hopalong

April 29th, 2009, 09:15 PM

Hi Aaron !

It's again here:
3545427 CDO2CWLDJAQZBY57SGPTPMLQZWZSLL77 [YOUR SEARCH TERMS].mp3
????? !!!!!

and a new getcodec

3409834 3TN3BUZG2IWJ6FLCGHBUUWMCJR4ZWRCY [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 6 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

Aaron.Walkhouse

April 29th, 2009, 10:15 PM

That's not the old isaveclub file. That one is 3545426 bytes long.

Oh, I see that it was removed from the list.
Maybe they are keeping it to 512 hashes long.

hopalong

April 30th, 2009, 05:09 AM

That's not the old isaveclub file. That one is 3545426 bytes long.

Oh, I see that it was removed from the list.
Maybe they are keeping it to 512 hashes long.

I've just thought that 2 day is enough to handle it. It's interesting , that the 1st entry in Bitzi was as Dangerous/Misleading by nezello at 2009-01-18 07:23:07 . You say, it was handled, but removed by mistake ?

For beginning of the day here is

3402457 B5YY36Y37HB4FIAUIZS2PHJM66VWXJUQ [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 6 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3

Aaron.Walkhouse

April 30th, 2009, 06:17 AM

I don't think it was by mistake. I think old entries are moved out when new entries come in.
Perhaps there should be a second hash list like the hostiles.txt that can handle a large list.

hopalong

April 30th, 2009, 12:40 PM

I don't think it was by mistake. I think old entries are moved out when new entries come in.
Perhaps there should be a second hash list like the hostiles.txt that can handle a large list.

Yes, a fast cache and a bigger second level storage. I don't really know, but there are so many good and fast searching method. 10 weeks, 120 getcodec. In these days I find about 4-5 getcodec every day. They issue a new one in every 3-4 hours from this type.

3404939 UTLMWEUURW3D3LDMP4MRZ4O4AP4O2LHH [YOUR SEARCH TERMS][suffix].mp3
suffix is empty, " 2009", " - best track ever", " - greatest hits"
scan shows 6 hits
NOD32 says: Found a variant of WMA/TrojanDownloader.GetCodec.gen
Added to Bitzi as
[YOUR SEARCH TERMS].mp3 a variant of WMA/TrojanDownloader.GetCodec.gen.TROJAN
[YOUR SEARCH TERMS].mp3
[YOUR SEARCH TERMS] 2009.mp3
[YOUR SEARCH TERMS] - greatest hits.mp3
[YOUR SEARCH TERMS] - best track ever.mp3