Spyware In Files
(Click here to view the original thread with full colors/images)Posted by: El_Jefe
The following was from an article in the L.A. Times on 12/02/02:
Film companies have a new tool to help: automated detection systems -- called "spying" devices by students -- that can be hidden in pirated files. These virtual alarms alert the copyright holder to an unauthorized user and can pinpoint that person's Internet address.
I believe they mentioned Warner Bros. as one of the companies using it. I think somebody has mentioned this before in a post. But I have a few questions regarding this.
1) Is it possible to identify the attached spying file and remove it?
2) Will certain firewall software, such as ZoneAlarm, stop it from calling back?
3) Has anybody actually seen a file with this attached?
Posted by: TClite
scary stuff, i would imagine that spybot or addware would detect it, after all it must exhibit the behaviour of spyware - and it therefore must leave a trace for these programs to remove it, i wonder if there is a program which can detect potential files within a file (i.e syware)
Posted by: Ardor
1)Complicated, and probably not unless cracked. Adaware or spyware will not detect it, since it's technically not spyware!
2)Yes!
3)In software and some games yes, but my firewall alerted me and I blocked it! I have had some experiences with web-pages popping up after I played an mpeg and would be wary of any mediaplayer-related files! In AVIs and other divx-files, not yet!
Posted by: Sneepboy
Windows Media Player can do those kinds of nasty things to you. It can handle scripts and process their requests. Also also keeps a nice little handy list of what files you have played too. I suspect the new version 9 will be even sneakier. It is certianly NOT my default media player and when I do need to use it for something I wouldnt want it tattleing on, I engage my internet lock and I dont turn back on until I reboot. If it wasnt for that, I would really like Windows Media Player. I hope someone can make a freeware app. that can scan files for that crap before they are ever run. Or, how about an app. that neuters WMP! Even though that stuff isnt a virus, Norton & Mcafee should include that with their programs, it is practically up their alley. How about adaware, I bet if they wanted to they could too. They all definately know a little something about scanning files.
Posted by: UnOwen1
Originally posted by Sneepboy@Dec 8 2002, 08:06 PM
Windows Media Player can do those kinds of nasty things to you. It can handle scripts and process their requests. Also also keeps a nice little handy list of what files you have played too. I suspect the new version 9 will be even sneakier. It is certianly NOT my default media player and when I do need to use it for something I wouldnt want it tattleing on, I engage my internet lock and I dont turn back on until I reboot. If it wasnt for that, I would really like Windows Media Player. I hope someone can make a freeware app. that can scan files for that crap before they are ever run. Or, how about an app. that neuters WMP! Even though that stuff isnt a virus, Norton & Mcafee should include that with their programs, it is practically up their alley. How about adaware, I bet if they wanted to they could too. They all definately know a little something about scanning files.
If it wasnt for that, I would really like Windows Media Player.
I find that windows media player clips the last few seconds off of any cuts I play..
Posted by: ShareDaddy
Yeah, I won't use WMP because of this, I also will not download any WMP files. You play them and it sends you to a MS site for owner/copyright validation/certification.
Edit: As any program you normally use to view and or listen to stuff probably already has your authority to access the internet, your firewall will not stop it, I suggest you revoke all internet access for all fo your watch/listen programs to help curb this type of thing from happening. My suggestion only.
Posted by: Paul
Linking to webpages in only possible in those Windows Media formats (.wmv, .wma, etc.) and also in RealMedia formats. Certainly not in AVI and MPEG files.
And if you do have an mpeg that does this, then it just a renamed .wmv file. Notice the buffering and slow skipping.
Posted by: ToraBoraDweller
Who can say that you have not just made a backup >> in Germany under law this is a right !!
also
who says I cannot place my backups in e.g. KaZaA's shared folder ??!!
This is food for lawyers.
Posted by: El_Jefe
Actually, this is all very confusing. In the U.S., the same is true. You can make a backup according to the Fair Use Law. But according to the Digital Millenium Act (or whatever it's called), you can't use means to break the protections on any copyrighted digital product. Of course, these things only apply in the U.S.
Posted by: ToraBoraDweller
Luckily in Europe there still is a little more leeway.
We are very anxiously looking at the recent case in Denmark,where users were sued by
a socalled antipiracygroup .
!!question does anyone know more about the later devellopments??
Did they make an appeal to a higher court?
I think the European parliament would have the last say in this.
Posted by: nipsey
forgive me if i am adressing a different situation but i dont think they are hiding htis spyware in originals that are later copied adn shared. i think they are creating and sharing their own files that contain teh spyware. I cant speak to the dvd/movie situation, but imagine with music: you are converting the cd to mp3s, so you wouldnt actually be capturing any of this spyware info.
so, wokring wiht the assumption that they are creating, say a .wmv version of a movie, and adding the spyware and then "distributing" it by putting it in their own shared file so someone can copy it.....how could that be illegal, they actually distributed it themselves! in any event, it would seem to be entrapment
Posted by: Đark Princ€
damn thats crappy as hell!!! like these ppl dont make enough money in the first place!!these compines make me laugh cause if they did send me a bill !!! i would write across it this::
sorry if this affends you!!!
!!!!!fuck off i will not pay so suck me!!!!!!!! and go ahead and sue me cause you cant get blood from a turnip!!! lol
i have already blocked media player and real player from the net!!!! GOD I LOVE NORTON!!!!!!!! and ppl block incomming computers from accessing Diet kaza i heard that once a connection is made dietkaza is now trail ware!!!!!! i heard that in diets forum!!!!!!
Posted by: El_Jefe
Originally posted by nipsey@Dec 14 2002, 02:59 AM
forgive me if i am adressing a different situation but i dont think they are hiding htis spyware in originals that are later copied adn shared. i think they are creating and sharing their own files that contain teh spyware. I cant speak to the dvd/movie situation, but imagine with music: you are converting the cd to mp3s, so you wouldnt actually be capturing any of this spyware info.
so, wokring wiht the assumption that they are creating, say a .wmv version of a movie, and adding the spyware and then "distributing" it by putting it in their own shared file so someone can copy it.....how could that be illegal, they actually distributed it themselves! in any event, it would seem to be entrapment
No, you're exactly right, nipsey. What you described is exactly what's described or at least implied in the article.
Posted by: logicz
Originally posted by ShareDaddy@9 December 2002 - 09:49
Edit: As any program you normally use to view and or listen to stuff probably already has your authority to access the internet, your firewall will not stop it, I suggest you revoke all internet access for all fo your watch/listen programs to help curb this type of thing from happening. My suggestion only.
How do you do this SD? I use WinXP Pro and the built in firewall.
Posted by: Nobody1234
Hi logicz,
You need another firewall if you want to have control over outgoing connections. Windows XP firewall is only for inbound blocking. I use Norton Internet Security 2003. It has a Personal Firewall 2003 that give you the control as well as Antivirus 2003 for virus protection.
Just make sure you set it to block outgoing connections from Windows Media Player. And any other software you don't want to give out any information.
I am sure if you look around for this software in verified you will find it. B)
Posted by: logicz
Originally posted by Nobody1234@22 December 2002 - 16:46
Hi logicz,
You need another firewall if you want to have control over outgoing connections. Windows XP firewall is only for inbound blocking. I use Norton Internet Security 2003. It has a Personal Firewall 2003 that give you the control as well as Antivirus 2003 for virus protection.
Just make sure you set it to block outgoing connections from Windows Media Player. And any other software you don't want to give out any information.
I am sure if you look around for this software in verified you will find it. B)
Thanks Nobody...I'll take a look see.
Posted by: logicz
hmmm...haven't been able to find it in the verifieds. Anyone got the hash?
Posted by: Nobody1234
Well I checked and found this one in verified:
File:Norton Internet Security 2003.zip
Length:66490368Bytes,64932KB
UUHash:=M5U5B1GQidlrBNz+9gyfxM3y5sc=
I also just made my own one: (currently sharing)
File:Norton Internet Security 2003.zip
Length:66426102 Bytes,64869KB
UUHash:=xBciyt3izfqIxCZbbtQLycQXmL4=
I know the one I have works but I thought if you had more sources it would increase your chances.
Posted by: logicz
O.K....I'm officially stupid! I did not realize Norton Internet Security and Norton Personal Firewall were the same thing.
Thanks again Nobody1234
Posted by: Nobody1234
No. They aren't. Norton Internet Security has more stuff including AntiVirus.
Posted by: logicz
I have Norton Antivirus 2002 installed. So, if Norton Internet Security has Antivirus as well, Should I just uninstall my AV and install the full 2003 package?
Posted by: Nobody1234
Since you have 2002 the best would be to uninstall it and then install Internet Security 2003. You would be doing an update for your AntiVirus at the same time.
If you absolutely don't want to remove your current antivirus just get Norton Personal Firewall.
I think your best option is to install the complete package of NIS 2003.
Posted by: Mr. Nice Guy
I guess I'm stuck in my old ways of using Mcafee for antivirus, and using Zone Alarm for firewall.. can someone please prove to me that I should switch.
Posted by: logicz
Thanks again Nobody. I think you're a Somebody! :lol:
Posted by: Rat Faced
Zone Alarm 3 Pro's still best Firewall...in my opinion
There are debates on pros/cons of different Firewalls on another thread..suggest you do a search.
Posted by: Mr. Nice Guy
I would really like to find something that can run alongside ZApro. But from the reading I've done, all the popular ones do about the same thing (of course not as well) as zapro. I ran black ice for a long time, got tired of it, and now after reviewing leak test, black ice is no good. But it did provide that slight level of protection (supposidly) against things like a sub 7 port scan and what not. I refuse to not let my zone alarm defenses down, but would be nice to find a program that could coinside with it, something similar to what black ice was offering.. but all the other popular ones pretty much do the basics of what zapro already covers.
Yeah, it may not be totally necesarry, but just what I would like to do.
Posted by: somegrrlz
tiny personalfirewall v 2 will run simultaneously with za on the same machine. never tried 3, and after the code was sold to a new company (i think) if you try to run tpf4 with za it locks up the machine. will try other firewalls and combos when i get the time.
tpf2 gives you port and packet type control.
Posted by: Mivaro
Maybe a stupid question.....
Why should you use 2 firewalls?
Mivaro
Posted by: SeK612
Sadly its kinda inevatable that companies will begin to crack down on copied software (especially because its been reported that record sales and the like have been down 40% recently and a large chunk of that percentage is due to downloading)
Windows media player was mentioned as a weakness (it is owned by MS I guess <_< ). Luckily I don't really use it as I find it kinda clunky and annoying. I use Winamp for music and movies and was wondering on how secure people would rate this. It doesn't ask to access the net that much and, since it doesn't really need it, I rarely let it through.
As for a firewall I use Zone Alarm and its the best one I've used. Theres also Kerio Personal Firewall which seems pretty decent.
SeK 612
Posted by: Colt Seevers
Originally posted by Rat Faced@23 December 2002 - 13:52
Zone Alarm 3 Pro's still best Firewall...in my opinion
Yer Damn Right!