Articles

Metasploit Framework Windows Tutorial
Remote Desktop Connection
Windows Processes That May Be Dangerous
How-To use NetCat a Tutorial
Common Linux Commands
Common Ports
Netcat Commands
HTTP Response Codes
War-Google Hack Terms
Wardriving
Avoiding Social Engineering and Phishing Attacks
Intrusion Detection on Linux
Linux Intrusion Detection
Penetration Testing Guide
Penetration Testing Tools
Social Engineering Fundamentals, Part I: Hacker Tactics
Social engineering (computer security)
The Psychology of Social Engineering

The Archives

General GSO
GovernmentSecurity.org News & Suggestions
In The News
Open Topic
General Security Information
Trash Can
Exploit & Vulnerability Mailing List Archives
Trial Member Forum
Product and Program Reviews GSO Tutorials
System Security
Windows Systems
Beginners Section
Linux & Unix Systems
File Downloads
Exploit Research & Discussion Trojan & Virus Errata
Networking Security / Firewall / IDS / VPN / Routers
System Hardening
E-Mail Security
Wifi Security
Trial Member Uploads
Upload discovered Trojans & Mal ware
GSO Programming Section
C , C++ , VC++
Visual Basic.NET
Perl /CGI
Java/Javascript
PHP/XML/ASP/HTML
Assembly + Other
The Cork Board
Network Security Consultant Directory
Network Security Jobs
The Archives
Encryption Information
General Network Security
Internet Anonymity
HTTP Protocol Security
Linux Security
MS IIS Information
Exploit Articles
Programming / Tool Design
GSO Software Projects
Public Downloads
Microsoft Security Questions and Papers

Fractured

QUOTE
July 17: A virus that originally masqueraded as a DVD copying programme is erasing MP3 files on millions of computers around the world.

The recent outbreak of the W32 or Nopir-B was spread largely through shady sites devoted to exchanging music files.

The virus erases all MP3 files on infected computers and files ending in ".com".

Internet users should avoid downloading software from sites online with which they are not familiar. Exercising such caution can be one's best protection against viruses transmitted online, said Mr Michael Dickopf, security expert at the Office of Information Technology Security (BSI) in Bonn.

Mr Dickopf indicated that the Nopir-B virus is designed to look like a DVD cracking programme that allows users to bypass copyright protections built into DVD discs that prohibit unauthorised copying.

The whole deletion of MP3 files and other data occurs when users attempt to run the programme.

The virus is now being spread by e-mail as well as from direct download. So far the virus has not been deemed to be highly dangerous, since it is not yet widespread, said Mr Dickopf.

He advised all computer users to update their anti-virus signatures to protect the MP3 files from the Nopir-B virus.


hxxp://navhindtimes.com/stories.php?part=news&Story_ID=071812

heh i had thought of this idea a long time ago as a way for the Music Industry to fight back... wonder what took them so long....=P
Yorn
Well, the problem is that they can't delete files from your computer.

I know, it sounds wierd, but even copyrighted materials stored on your computer can't be deleted. You can be held liable and forced to delete them, but the MPAA and RIAA can't delete them for you.
slynx
QUOTE
I know, it sounds wierd, but even copyrighted materials stored on your computer can't be deleted. You can be held liable and forced to delete them, but the MPAA and RIAA can't delete them for you.


...not legally, anyway. i have my theories.....
Yorn
Yeah, good point. If they want to sue you, they can't delete them. But maybe if they don't want to sue, then they'll just release software that deletes them.
slynx
welcome to my world of thinking.....

doesn't it suck thinking everyone and everything's out to get you?

:-p
Cyberbob
The virus creators just want us to think it's the RIAA...

It's really microsoft trying to promote thier superior WMA fromat. tongue.gif
We're onto you Bill Gates mad.gif
slynx
....i never even thought about that possibility.... damn they're good

seriously though; who would do something like this? i mean, anyone using a computer (which the virus writer obviously was) at some point or another listens to an mp3 file, so why write something to delete mp3s??

if they had any self-respect, their virus would steal everyone's mp3 files instead of deleting them....

.... not to give anyone ideas or anything though.....
Cyberbob
...Well like most virus writers, these people enjoy destroying things and causing chaos.

When most people get hit by some trojan or spyware they either delete it or reinstall, then move on. But waking up one mourning and finding your 1,678 mp3 songs missing and no back-up can cause any sane-minded person to curl up into a ball in the corner and mutter the lyrics to their favorite Bruce Springsteen song blink.gif

I think it is a good idea, if I were a virus writer because most home user's most important files are probably music.
slynx
You know.... there have been quite a few very talented virus writers. It's amazing the best thing they can think of to do is cause needless destruction.

And that's all I have to say. Thanks for bringing this up, Fractured.
slynx
wait a minute......

so, uhh.... Cyberbob....

http://www.sophos.com/virusinfo/analyses/w32nopirb.html

[Click Advanced tab, picture displayed by Nopir-B]

Coincidence?
AdmiralB
since all the music companys are now cooperating to fight music piracy...i do believe in the possibility they illegal ask for virus writers to erm *cough* even the odds
myth
My bloody god, its not a f-ing conspiracy against downloaders.

Its probably some guy in a band that hates it when people download mp3's, so he wrote a quick program that'll delete them.

Its not hard to write a program to search for *.mp3 then rd *.mp3 and bind it to another program or just fill up the data space with useless junk...
aelphaeis_mangarae
This is not suprising to me at all....

I mean I remember hearing about the RIAA having contact with hacker groups such as "Gobbles" and how they say these groups would be helping them.

Obviously this is illegal and these guys should be punished....wouldn't be suprised if some virus writer counters them by creating a virus which destroys this one and DDoS's there website(s).
cd_room
Hi, everyone.
I just finished reading the decriptions of Nopir-B virus and i have to say, that is quiet a impressive virus.
And about the writer of this virus, well i think i could be anyone, group or government agent or both.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2005 Invision Power Services, Inc.