Old 24th December 2006, 00:26   #1
mistermeow
Senior Member
 
Join Date: Dec 2006
Posts: 110
Send a message via AIM to mistermeow
Warning : Malware

I started to download this program E JUKEBOX 3 0 (http://winamp.com/plugins/details.php?id=133150), but it is a 20k EXE file. If it was a zip I would have downloaded and examined the contents. At the tiny size of 20k, and being an EXE file, this seems likely to be a malicious program. After reading several reviews (complaints), it seems it is indeed that, possibly a keylogger.

If you look at the "good" reviews, they are all 5 star reviews, written by the author speaking of what an advanced, greatly sophisticated program it is. At 20 kilobytes? hahaha. WINAMP needs to examine this program and probably delete this peice of MALWARE before more people are tricked into downloading this file. http://winamp.com/plugins/details.php?id=133150

Jeff
mistermeow is offline   Reply With Quote
Old 24th December 2006, 00:59   #2
Sawg
Forum King
 
Join Date: Jun 2000
Location: Phoenix, AZ
Posts: 7,456
Send a message via ICQ to Sawg Send a message via AIM to Sawg Send a message via Yahoo to Sawg
So you can to this conclusion just about the size, and have no other proof then the fact it is "small?"

I downloaded the file and it is virus free. It launches the products website and downloads the latest version of the program, which is also virus free.

Please next time have some actual proof before you go making baseless accusations.

| Brought to you by ^V ^C | The one... the original... no seriously!
Sawg is offline   Reply With Quote
Old 24th December 2006, 17:44   #3
Lunchbox_1
Junior Member
 
Join Date: Dec 2006
Posts: 2
If it's malware, great. But saying a piece of software is malware because of exe size is probably the dumbest thing I have ever heard.

I just wrote a .net app that's only 18k. Is it malware too?
Lunchbox_1 is offline   Reply With Quote
Old 24th December 2006, 17:52   #4
DrO
 
Join Date: Sep 2003
Posts: 27,873
the 20kb is just a downloader for their 4.3Mb installer (since when that submission was made there was a 3Mb limit on submitted files). the fact it's such a large file always makes me wonder but it wouldn't be on the site unless things were correct and valid.

although borderline for what i now allow through, it's still a valid submission and considering it's been on the site since 2003, i think if there was something dodgy with it, then it would have been flagged up a few years back.

as for the comment about the size, it's quite amazing what can be pushed into 20kb going from the programming view point

-daz
DrO is offline   Reply With Quote
Old 24th December 2006, 19:39   #5
mistermeow
Senior Member
 
Join Date: Dec 2006
Posts: 110
Send a message via AIM to mistermeow
My major point was "WINAMP needs to examine this program". More than one person complained of it being malware, and it is only a 20k program, that right there is extremely suspicious, along with the various reviews, it seemed there needed to be further examination. I was going to look at the program, but being an *.exe, there was no way I was going to run it on my system.

Thank you for the clarification, and just remember all of you out there, especially the newbies, you can never be too careful! If I was to install this program (which I am not), I would keep a careful eye on it.

Jeff
mistermeow is offline   Reply With Quote
Old 24th December 2006, 21:21   #6
DrO
 
Join Date: Sep 2003
Posts: 27,873
i'll amend the review for it later on (just to clarify things for any new downloaders though how many both to read them is a different thing ).

as the process works, it was examined on submission (i don't think it was me since i don't remember being a reviewer in 2003) and would/should have been on any resubmits. yes there is the issue that it's then attempting to download another file but as i said in my other post, if there was such an issue then i'm sure it would have cropped up on here (it's not possible to easily monitor the reviews on submissions on the winamp.com site hence why nothing would have been done with the few weirder comments which have been mentioned)

-daz
DrO is offline   Reply With Quote
Old 24th December 2006, 22:42   #7
Wildrose-Wally
The Albertan
 
Wildrose-Wally's Avatar
 
Join Date: Mar 2001
Location: Sunny Southern Alberta
Posts: 6,132
Quote:
If you look at the "good" reviews, they are all 5 star reviews, written by the author speaking of what an advanced, greatly sophisticated program it is.
You made an accusation I looked into, and I found absolutely NO evidence of that. Couple that with the other accusation that so far is unproven, and the conclusion is that you are threading very thin ice.

We do not like malware on our site, but we abhor false accusations even more.

The next accusation you make you will prove, or I will ask the moderators to suspend your account.

THE END

Wildrose-Wally is offline   Reply With Quote
Old 25th December 2006, 19:40   #8
mistermeow
Senior Member
 
Join Date: Dec 2006
Posts: 110
Send a message via AIM to mistermeow
God bless you too, you nice person!!!

I rather get beat up by some meanies, than have someone (even you)install something on their computer to ruin their day. I am sorry I did not know you owned the forums, accept my humble apology from this horrible animal that I am.

I think the next mean comment you leave, I am going to ask the moderators to change your icon to a big pink star, or maybe a tinkerbell.

I will go crawl back under my bridge and drool some more.

Oh yeah MERRY CHRISTMAS everyone!

Jeff
mistermeow is offline   Reply With Quote
Old 25th December 2006, 20:00   #9
mistermeow
Senior Member
 
Join Date: Dec 2006
Posts: 110
Send a message via AIM to mistermeow
One more comment, I didn't accuse anyone of anything. There is something wrong somewhere. More than one person posted a message claiming the download to be malware, and they gave a 1 or 0 star rating which still applies to the overall rating.

But if you look at the reviews, those negative reviews have all of the sudden been deleted???, but you can still see the overall low rating the program has in the overall rating due to those "now deleted" bad reviews.

Something fishy occured to someone somewhere.

Any program that links back to a website to download a full install is vunerable to hackers, not just the person who wrote the original app.

On an old Mac years ago, I downloaded a trojan horse from a popular website for a popular peice of compression software. The Website/software company had obviously been hacked.

I did not accuse _any person_ of anything. You should be careful before _you_ accuse me, when all I am trying to do is help some poor innocent person from getting screwed.

Thank YOU

Jeff
mistermeow is offline   Reply With Quote
Old 26th December 2006, 00:09   #10
Wildrose-Wally
The Albertan
 
Wildrose-Wally's Avatar
 
Join Date: Mar 2001
Location: Sunny Southern Alberta
Posts: 6,132
Thank you for your great humanitarian effort.
Now could you go troll somewhere else, please?
Thank you very much.

Wildrose-Wally is offline   Reply With Quote
Old 26th December 2006, 00:34   #11
Koopa
16-Bit Moderator
 
Koopa's Avatar
 
Join Date: Apr 2004
Posts: 4,341
But to be honest, that they publish an 20KB webinstaller isn't the best solution. They simply could change the contents of the file, which starts to download.

This make the whole check much more difficult.

And guys, it's Christmas, so stop your conflicts and be friends, at least for these few days.
Koopa is offline   Reply With Quote
Old 27th December 2006, 04:44   #12
Wildrose-Wally
The Albertan
 
Wildrose-Wally's Avatar
 
Join Date: Mar 2001
Location: Sunny Southern Alberta
Posts: 6,132
Found a key logger on my system, deleted it with spybot, installed the jukebox again, found the keylogger again.

Program deleted from the Winamp database, never to be seen again.

Wildrose-Wally is offline   Reply With Quote
Old 29th December 2006, 04:10   #13
mistermeow
Senior Member
 
Join Date: Dec 2006
Posts: 110
Send a message via AIM to mistermeow
Three people beat me over the head (figuratively), after I posted about this very dangerous peice of malware. I guess I'm not such a bad guy afterall

Jeff
mistermeow is offline   Reply With Quote
Reply
Go Back   Winamp & Shoutcast Forums > Winamp > Winamp Technical Support

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump