<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>TorrentFreak &#187; trojan</title>
	<atom:link href="http://torrentfreak.com/tag/trojan/feed/" rel="self" type="application/rss+xml" />
	<link>http://torrentfreak.com</link>
	<description>Torrent News, Torrent Sites and the latest Scoops</description>
	<lastBuildDate>Sun, 22 Nov 2009 09:07:19 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.3</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Trojan Blocks The Pirate Bay and Mininova</title>
		<link>http://torrentfreak.com/trojan-blocks-the-pirate-bay-and-mininova-090104/</link>
		<comments>http://torrentfreak.com/trojan-blocks-the-pirate-bay-and-mininova-090104/#comments</comments>
		<pubDate>Sun, 04 Jan 2009 17:08:00 +0000</pubDate>
		<dc:creator>Ernesto</dc:creator>
				<category><![CDATA[Hot Off The Press]]></category>
		<category><![CDATA[bittorrent]]></category>
		<category><![CDATA[Troj/Qhost-AC]]></category>
		<category><![CDATA[trojan]]></category>

		<guid isPermaLink="false">http://torrentfreak.com/?p=8327</guid>
		<description><![CDATA[A new trojan popped up at several torrent sites a few weeks ago, one that blocks access to The Pirate Bay and Mininova, while informing its victims that "downloading is wrong." The trojan edits the hosts file on Windows machines, and redirects the BitTorrent sites to localhost, making them impossible to load.]]></description>
			<content:encoded><![CDATA[<p><img src="http://torrentfreak.com/images/warning.jpg" align="right" alt="trojan" />The trojan in question (Troj/Qhost-AC) <a href="http://www.sophos.com/security/analyses/viruses-and-spyware/trojqhostac.html">identified</a> by anti-virus company Sophos, is a rather unusual one. It doesn&#8217;t seem to install spyware or traditional malware, but instead blocks access to the two <a href="http://torrentfreak.com/top-10-torrent-sites-of-2008-081228/">most popular</a> BitTorrent sites.</p>
<p>One of its victims, who got the trojan from downloading a torrent from The Pirate Bay, contacted TorrentFreak. He told us: &#8220;I didn&#8217;t follow the well <a href="http://torrentfreak.com/stop-downloading-fakes-and-junk-torrents-071204/">established rules</a> of downloading. It was a file with a low number of seeds, many leechers and no comments. I&#8217;ve downloaded the file and didn&#8217;t visit the torrent page again to view if there were any negative comments.&#8221;</p>
<p>It turned out that the trojan originated from a keygen supplied with a copy of pirated software. Instead of generating a key, it modified the <a href="http://en.wikipedia.org/wiki/Hosts_file">hosts file</a> of the computer so that it redirects The Pirate Bay, Suprbay (The Pirate Bay forums) and Mininova to 127.0.0.1, which means that the sites never load.</p>
<p>Aside from blocking the three sites in question, the trojan caused popups and even played a sound file saying that &#8220;downloading is wrong&#8221;. The bad torrent was removed from The Pirate Bay soon after users commented that the key generator didn&#8217;t work, but it is safe to assume that this is not the first and only attempt to spread a trojan like this one. </p>
<p>The question remains, who is behind this? While some might argue that the MPAA, RIAA or other anti-piracy advocates might be the source, we think it more likely that the attack originates from a relatively innocent prankster targeting pirates. </p>
<p>The good news is that it is fairly easy to fix, manually removing the entries from the hosts file solves the problem. &#8220;Overall a bad experience, but the computer is fine now,&#8221; the affected user told us. Advice and tips about the Windows Hosts file can be found <a href="http://www.mvps.org/winhelp2002/hostsfaq.htm">here</a>.</p>
<p>Article from: <a href="http://torrentfreak.com">TorrentFreak</a>, check out our new blog at <a href="http://freakbits.com">FreakBits</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://torrentfreak.com/trojan-blocks-the-pirate-bay-and-mininova-090104/feed/</wfw:commentRss>
		<slash:comments>135</slash:comments>
		</item>
		<item>
		<title>Pirate Party Official Raided after Uncovering State Trojan</title>
		<link>http://torrentfreak.com/pirate-party-official-raided-after-uncovering-state-trojan-080917/</link>
		<comments>http://torrentfreak.com/pirate-party-official-raided-after-uncovering-state-trojan-080917/#comments</comments>
		<pubDate>Wed, 17 Sep 2008 17:05:13 +0000</pubDate>
		<dc:creator>Ernesto</dc:creator>
				<category><![CDATA[DRM and Other Evil]]></category>
		<category><![CDATA[Hot Off The Press]]></category>
		<category><![CDATA[Legal Issues]]></category>
		<category><![CDATA[germany]]></category>
		<category><![CDATA[pirate pary]]></category>
		<category><![CDATA[trojan]]></category>

		<guid isPermaLink="false">http://torrentfreak.com/?p=4779</guid>
		<description><![CDATA[The spokesperson of the German Pirate Party saw his house raided after the party published a leaked document which showed that the government uses a homemade "trojan" to wiretap Skype conversations. In addition, a server from another party member was seized.]]></description>
			<content:encoded><![CDATA[<p><img src="http://torrentfreak.com/images/ppger.gif" alt="pirate party germany" align="right" />The Pirate Party is known for it&#8217;s battle against the ever increasing government surveillance on the public. So, when an anonymous whistleblower sent them a internal document which showed that the government went as far as installing trojans on computers, they didn&#8217;t hesitate to publish it.</p>
<p>German authorities weren&#8217;t too happy about the leak, which might be illegal <a href="http://yro.slashdot.org/article.pl?sid=08/09/17/1830230">according</a> to a criminal law specialist, and went after the source. Earlier this week police searched the home of the Pirate Party spokesperson where they hoped to find more information. In addition to the home search, a server from another party member was seized. The server, however, was fully encrypted, so chances are low that it will uncover the whistleblower.</p>
<p>In a response, Andreas Popp, Chairman of the Bavarian Pirate Party said: &#8220;A brave person leaks documents to the Pirate Party, to inform the public about a procedure of the Bavarian Government, which is highly likely to violate the constitution. Now this persons is hunted like a criminal. Private rooms are raided, servers get seized.&#8221;</p>
<p>Pirate Parties around the world will continue to speak out against these, and other privacy threats. The trojan in question (<a href="http://www.piratenpartei.de/node/381">German</a>) was able to tap into Skype calls and intercept traffic to encrypted websites.</p>
<p>Article from: <a href="http://torrentfreak.com">TorrentFreak</a>, check out our new blog at <a href="http://freakbits.com">FreakBits</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://torrentfreak.com/pirate-party-official-raided-after-uncovering-state-trojan-080917/feed/</wfw:commentRss>
		<slash:comments>59</slash:comments>
		</item>
		<item>
		<title>uTorrent Marked as Trojan by Avast Antivirus</title>
		<link>http://torrentfreak.com/utorrent-marked-as-trojan-by-avast-080428/</link>
		<comments>http://torrentfreak.com/utorrent-marked-as-trojan-by-avast-080428/#comments</comments>
		<pubDate>Mon, 28 Apr 2008 10:15:43 +0000</pubDate>
		<dc:creator>Ernesto</dc:creator>
				<category><![CDATA[Bittorrent Clients]]></category>
		<category><![CDATA[Hot Off The Press]]></category>
		<category><![CDATA[avast]]></category>
		<category><![CDATA[bittorrent]]></category>
		<category><![CDATA[trojan]]></category>
		<category><![CDATA[utorrent]]></category>
		<category><![CDATA[Win32:Poison-DU [Trj]]]></category>

		<guid isPermaLink="false">http://torrentfreak.com/?p=2752</guid>
		<description><![CDATA[Thousands of uTorrent users got a worrying message from their antivirus software recently. Their favorite BitTorrent client was recognized as a trojan by Avast, and deleted form their computers. Attempts to redownload the software from uTorrent.com resulted in the same trojan warning. ]]></description>
			<content:encoded><![CDATA[<p>Of course, there is nothing wrong with <a href="http://utorrent.com">uTorrent</a>. The application somehow <a href="http://forum.avast.com/index.php?topic=35088.0">got listed</a> in Avast&#8217;s list of trojans, resulting in a false positive. uTorrent 1.7.7 was mistakenly listed as &#8220;Win32:Poison-DU [Trj]&#8220;, whereas the newer Beta&#8217;s were unaffected.</p>
<p>Such &#8216;false positives&#8217; often happen with other harmless applications &#8211; better safe than sorry- but since uTorrent <a href="http://torrentfreak.com/p2p-statistics-080426/">doubled its user base</a> in just 12 months and is installed on millions of computers, this problem affected a sizable number of people. It didn&#8217;t take long before the issue was reported to <a href="http://www.avast.com/">Avast</a>, and after approximately 5 hours the problem was fixed. </p>
<p>Earlier this week it became clear that uTorrent&#8217;s WebUI (+ Azureus and TorrentFlux) were vulnerable to <a href="http://r00tin.blogspot.com/2008/04/utorrent-pwn3d.html">several exploits</a>. Apparently the vulnerabilities in the webUI, allow outsiders to take over uTorrent and download random content onto one&#8217;s system. </p>
<p>uTorrent developer Greg Hazel told TorrentFreak that he is aware of the issue and working on a fix. For now, the BitTorrent client itself is perfectly safe and secure.</p>
<p><img src="http://torrentfreak.com/images/utorrent-trojan.jpg" alt="utorrent trojan" /></p>
<p>Article from: <a href="http://torrentfreak.com">TorrentFreak</a>, check out our new blog at <a href="http://freakbits.com">FreakBits</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://torrentfreak.com/utorrent-marked-as-trojan-by-avast-080428/feed/</wfw:commentRss>
		<slash:comments>72</slash:comments>
		</item>
		<item>
		<title>Anti-Piracy Trojan</title>
		<link>http://torrentfreak.com/anti-piracy-trojan/</link>
		<comments>http://torrentfreak.com/anti-piracy-trojan/#comments</comments>
		<pubDate>Tue, 16 May 2006 18:33:11 +0000</pubDate>
		<dc:creator>Ernesto</dc:creator>
				<category><![CDATA[All]]></category>
		<category><![CDATA[Anti-Piracy Gangs]]></category>
		<category><![CDATA[Hot Off The Press]]></category>
		<category><![CDATA[P2P and Filesharing]]></category>
		<category><![CDATA[Web Stuff]]></category>
		<category><![CDATA[bittorrent]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[mpaa]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[p2p]]></category>
		<category><![CDATA[trojan]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[warez]]></category>

		<guid isPermaLink="false">http://torrentfreak.com/anti-piracy-trojan/</guid>
		<description><![CDATA[Trojan/Erazer-A is a new trojan that spreads through P2P networks. Apart from infecting your pc with malware and disabling anti-virus applications, it also actively deletes music, video's and pictures from "shared folders', used by p2p applications.]]></description>
			<content:encoded><![CDATA[<p>Amazing&#8230;</p>
<p>First the MPAA&#8217;s <a href="http://TorrentFreak.com/mpaas-anti-piracy-dogs/">DVD sniffing dogs</a>, now <a href="http://www.sophos.com/virusinfo/analyses/trojerazera.html">a trojan</a> that&#8217;s targeting P2P content. Although the creators of the trojan are unknown until now, my guess is that the MPAA will be quite delighted.</p>
<p>Graham Cluley of Sophos, the company that discovered the virus, <a href="http://www.pcworld.idg.com.au/index.php/id;1036928739;fp;2;fpid;1">commented</a>:</p>
<blockquote><p>&#8220;The Erazer Trojan is a vigilante worthy of a Charles Bronson movie, taking the law into its own hands. However, it&#8217;s perfectly possible for the Trojan to aim poorly and wipe out innocent files too&#8221;.</p></blockquote>
<p>As far as I know BitTorrent is safe, for now.</p>
<p>Article from: <a href="http://torrentfreak.com">TorrentFreak</a>, check out our new blog at <a href="http://freakbits.com">FreakBits</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://torrentfreak.com/anti-piracy-trojan/feed/</wfw:commentRss>
		<slash:comments>15</slash:comments>
		</item>
	</channel>
</rss>
