Winamp & Shoutcast Forums

Winamp & Shoutcast Forums (http://forums.winamp.com/index.php)
-   Winamp Technical Support (http://forums.winamp.com/forumdisplay.php?f=11)
-   -   Warning : Malware (http://forums.winamp.com/showthread.php?t=262366)

mistermeow 24th December 2006 00:26

Warning : Malware
 
I started to download this program E JUKEBOX 3 0 (http://winamp.com/plugins/details.php?id=133150), but it is a 20k EXE file. If it was a zip I would have downloaded and examined the contents. At the tiny size of 20k, and being an EXE file, this seems likely to be a malicious program. After reading several reviews (complaints), it seems it is indeed that, possibly a keylogger.

If you look at the "good" reviews, they are all 5 star reviews, written by the author speaking of what an advanced, greatly sophisticated program it is. At 20 kilobytes? hahaha. WINAMP needs to examine this program and probably delete this peice of MALWARE before more people are tricked into downloading this file. http://winamp.com/plugins/details.php?id=133150

Jeff

Sawg 24th December 2006 00:59

So you can to this conclusion just about the size, and have no other proof then the fact it is "small?"

I downloaded the file and it is virus free. It launches the products website and downloads the latest version of the program, which is also virus free.

Please next time have some actual proof before you go making baseless accusations.

Lunchbox_1 24th December 2006 17:44

If it's malware, great. But saying a piece of software is malware because of exe size is probably the dumbest thing I have ever heard.

I just wrote a .net app that's only 18k. Is it malware too?

DrO 24th December 2006 17:52

the 20kb is just a downloader for their 4.3Mb installer (since when that submission was made there was a 3Mb limit on submitted files). the fact it's such a large file always makes me wonder but it wouldn't be on the site unless things were correct and valid.

although borderline for what i now allow through, it's still a valid submission and considering it's been on the site since 2003, i think if there was something dodgy with it, then it would have been flagged up a few years back.

as for the comment about the size, it's quite amazing what can be pushed into 20kb going from the programming view point

-daz

mistermeow 24th December 2006 19:39

My major point was "WINAMP needs to examine this program". More than one person complained of it being malware, and it is only a 20k program, that right there is extremely suspicious, along with the various reviews, it seemed there needed to be further examination. I was going to look at the program, but being an *.exe, there was no way I was going to run it on my system.

Thank you for the clarification, and just remember all of you out there, especially the newbies, you can never be too careful! If I was to install this program (which I am not), I would keep a careful eye on it.

Jeff

DrO 24th December 2006 21:21

i'll amend the review for it later on (just to clarify things for any new downloaders though how many both to read them is a different thing :) ).

as the process works, it was examined on submission (i don't think it was me since i don't remember being a reviewer in 2003) and would/should have been on any resubmits. yes there is the issue that it's then attempting to download another file but as i said in my other post, if there was such an issue then i'm sure it would have cropped up on here (it's not possible to easily monitor the reviews on submissions on the winamp.com site hence why nothing would have been done with the few weirder comments which have been mentioned)

-daz

Wildrose-Wally 24th December 2006 22:42

Quote:

If you look at the "good" reviews, they are all 5 star reviews, written by the author speaking of what an advanced, greatly sophisticated program it is.
You made an accusation I looked into, and I found absolutely NO evidence of that. Couple that with the other accusation that so far is unproven, and the conclusion is that you are threading very thin ice.

We do not like malware on our site, but we abhor false accusations even more.

The next accusation you make you will prove, or I will ask the moderators to suspend your account.

THE END

mistermeow 25th December 2006 19:40

God bless you too, you nice person!!!

I rather get beat up by some meanies, than have someone (even you)install something on their computer to ruin their day. I am sorry I did not know you owned the forums, accept my humble apology from this horrible animal that I am.

I think the next mean comment you leave, I am going to ask the moderators to change your icon to a big pink star, or maybe a tinkerbell.

I will go crawl back under my bridge and drool some more.

Oh yeah MERRY CHRISTMAS everyone!

Jeff

mistermeow 25th December 2006 20:00

One more comment, I didn't accuse anyone of anything. There is something wrong somewhere. More than one person posted a message claiming the download to be malware, and they gave a 1 or 0 star rating which still applies to the overall rating.

But if you look at the reviews, those negative reviews have all of the sudden been deleted???, but you can still see the overall low rating the program has in the overall rating due to those "now deleted" bad reviews.

Something fishy occured to someone somewhere.

Any program that links back to a website to download a full install is vunerable to hackers, not just the person who wrote the original app.

On an old Mac years ago, I downloaded a trojan horse from a popular website for a popular peice of compression software. The Website/software company had obviously been hacked.

I did not accuse _any person_ of anything. You should be careful before _you_ accuse me, when all I am trying to do is help some poor innocent person from getting screwed.

Thank YOU

Jeff

Wildrose-Wally 26th December 2006 00:09

Thank you for your great humanitarian effort.
Now could you go troll somewhere else, please?
Thank you very much.

Koopa 26th December 2006 00:34

But to be honest, that they publish an 20KB webinstaller isn't the best solution. They simply could change the contents of the file, which starts to download.

This make the whole check much more difficult.

And guys, it's Christmas, so stop your conflicts and be friends, at least for these few days. ;) :)

Wildrose-Wally 27th December 2006 04:44

Found a key logger on my system, deleted it with spybot, installed the jukebox again, found the keylogger again.

Program deleted from the Winamp database, never to be seen again.

mistermeow 29th December 2006 04:10

Three people beat me over the head (figuratively), after I posted about this very dangerous peice of malware. I guess I'm not such a bad guy afterall :) ;)

Jeff


All times are GMT. The time now is 18:27.

Copyright © 1999 - 2010 Nullsoft. All Rights Reserved.