<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>TorrentFreak &#187; virus</title>
	<atom:link href="http://torrentfreak.com/tag/virus/feed/" rel="self" type="application/rss+xml" />
	<link>http://torrentfreak.com</link>
	<description>Torrent News, Torrent Sites and the latest Scoops</description>
	<lastBuildDate>Sat, 21 Nov 2009 21:13:58 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.3</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>TrafficLoader.com to Infect BitTorrent Users with Malware</title>
		<link>http://torrentfreak.com/trafficloadercom-to-infect-bittorrent-users-with-malware-080809/</link>
		<comments>http://torrentfreak.com/trafficloadercom-to-infect-bittorrent-users-with-malware-080809/#comments</comments>
		<pubDate>Sat, 09 Aug 2008 06:16:12 +0000</pubDate>
		<dc:creator>enigmax</dc:creator>
				<category><![CDATA[DRM and Other Evil]]></category>
		<category><![CDATA[Hot Off The Press]]></category>
		<category><![CDATA[P2P and Filesharing]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[PPI]]></category>
		<category><![CDATA[Spyware]]></category>
		<category><![CDATA[TrafficLoader]]></category>
		<category><![CDATA[virus]]></category>

		<guid isPermaLink="false">http://torrentfreak.com/?p=3506</guid>
		<description><![CDATA[A new BitTorrent site has appeared which will allow scammers and spammers to infect its users with spyware, malware and viruses. An admin of TrafficLoader.com says that no bad torrents will ever be removed from the site and is inviting people to upload malicious software to infect torrent users.]]></description>
			<content:encoded><![CDATA[<p><img src="http://torrentfreak.com/images/trafficloader.gif" align="right" alt="TrafficLoader" />Here at TorrentFreak we get a few emails each week announcing the arrival of new BitTorrent sites but there are so many, we can&#8217;t possibly write about them all. Instead, due to time limitations, we write about ones which are topical in some way or offer some interesting or unique features. Today we report on a new torrent site which does indeed have an interesting feature, although most won&#8217;t appreciate it.</p>
<p>One of the main drawbacks of using P2P software such as Limewire, is that the content on the network (Gnutella) is unmoderated &#8211; anyone is free to put up whatever they like, be it music, movies or TV shows. Of course, others use this lack of moderation as a green light to upload viruses, spyware and other malicious software. Equally, one of the <a href="http://torrentfreak.com/will-bittorrent-sites-become-obsolete-080530/">great strengths of BitTorrent</a> (at least from a harm-reduction point of view), is that .torrent files are uploaded to torrent sites where staff work hard to filter out as much of the malicious software as they can, making BitTorrent relatively malware-free.</p>
<p>Of course, this great system falls apart if you can&#8217;t trust the people running the site. People expect anti-pirates like <a href="http://torrentfreak.com/miivi-admit-they-will-report-pirates-to-proper-authorities-070918/">MiiVi </a>to be &#8216;the enemy within&#8217;, but who needs those when you have &#8216;friends&#8217; like the guys at new torrent site, TrafficLoader.com.</p>
<p>TrafficLoader.com (and its forum, pdls.info) hasn&#8217;t been setup for the benefit of BitTorrent users, it will be used by spammers, scammers and virus peddlers to spread their malicious software among the community (and make money off it). One of the admins called &#8216;Satty&#8217; says that no registration is needed to upload torrents to the site and none will ever be removed. The site does have a notice &#8211; &#8216;Viruses, spyware, affiliate links and everything related is strictly prohibited&#8217; but don&#8217;t believe it &#8211; Satty says these rules don&#8217;t apply to his friends in the PPI (Pay Per Install) community.</p>
<p>A few days ago the site was pretty bare with relatively few torrents and it was clear that most of them contained malware. It was suggested to Satty that it might be a good idea to have some genuine torrents too, to help disguise the bad torrents. Now things are starting to &#8216;improve&#8217; on the site with many more torrents added recently which don&#8217;t immediately appear to be malware. </p>
<p>In the last few days, TrafficLoader cosmetically &#8216;cleaned up&#8217; the site to remove porn adverts in order to appear more genuine but unfortunately, someone as well as TorrentFreak noticed that they made a big mistake:</p>
<p>&#8220;Why would you [Satty, admin] put a forum for ppi on a publicly scraped site, a.k.a <a href="http://www.pay-per-install.org/pay-per-install/1530-our-first-torrent-site.html">here</a>?? Do you just want ppl to find out shit is full of malware?&#8221;</p>
<p>Just in case they did want people to find out, hopefully this post will help them get the word out.</p>
<p>For those that want advice on how to avoid bad torrents in the future, try one of our <a href="http://torrentfreak.com/stop-downloading-fakes-and-junk-torrents-071204/">guides</a>.</p>
<p><strong>Update:</strong> The site was taken offline a few hours after this article was posted, that&#8217;s our good deed for the weekend.</p>
<p>Article from: <a href="http://torrentfreak.com">TorrentFreak</a>, check out our new blog at <a href="http://freakbits.com">FreakBits</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://torrentfreak.com/trafficloadercom-to-infect-bittorrent-users-with-malware-080809/feed/</wfw:commentRss>
		<slash:comments>98</slash:comments>
		</item>
		<item>
		<title>Virus Threatened to Kill File-Sharers, Creator Arrested for Copyright Infringement</title>
		<link>http://torrentfreak.com/virus-creator-threatened-080124/</link>
		<comments>http://torrentfreak.com/virus-creator-threatened-080124/#comments</comments>
		<pubDate>Thu, 24 Jan 2008 20:30:30 +0000</pubDate>
		<dc:creator>enigmax</dc:creator>
				<category><![CDATA[Copyright Issues]]></category>
		<category><![CDATA[Legal Issues]]></category>
		<category><![CDATA[P2P and Filesharing]]></category>
		<category><![CDATA[p2p]]></category>
		<category><![CDATA[piracy]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[winny]]></category>

		<guid isPermaLink="false">http://torrentfreak.com/virus-creator-threatened-080124/</guid>
		<description><![CDATA[The author of a bizarre virus which threatened to kill file-sharers has been arrested in Japan. Has he been arrested for making death threats? No! For writing the virus? No! This is the 21st century. He's been arrested for copyright infringement, of course.]]></description>
			<content:encoded><![CDATA[<p><img src="http://torrentfreak.com//images/winnykills.jpg" title="if you don't stop within 0.5 seconds, i'm going to kill you!" align="right" alt="winny virus kills" /><br />
Early March 2007, we <a href="http://torrentfreak.com/bizarre-virus-threatens-to-kill-file-sharers/">reported</a> about a bizarre virus circulating on the Winny network. It was quite unique, in that it taunted file-sharers, threatened to report them to the police and even threatened to kill them.</p>
<p>&#8220;This is a visit from the prevalent Piro virus! Stop P2P! If you don&#8217;t I&#8217;ll tell the police!&#8221; it exclaimed, while another message threatened: &#8220;Ah, I see you are using P2P againâ€¦â€¦if you don&#8217;t stop within 0.5 seconds, I&#8217;m going to kill you!&#8221;</p>
<p>Graham Cluley, a consultant for Sophos said of the virus: &#8220;This is one of the most bizarre pieces of malware we have seen in our labs for quite some time, but it&#8217;s data-destroying payload is no laughing matter.&#8221;</p>
<p>Now, the Japanese police say that they have apprehended the three man gang responsible for the creation and distribution of the virus. One man wrote the code, they say, and the others placed it on file-sharing network, <a href="http://en.wikipedia.org/wiki/Winny">Winny</a>.</p>
<p>However, due to Japanese law, it&#8217;s going to be tricky for the police to nail someone for creating the malware. They have a trick up their sleeve though, explains Graham Cluley, senior technology consultant for Sophos: &#8220;It isn&#8217;t illegal to write viruses in Japan, so the author of the Trojan horse has been arrested for breaching copyright because he used cartoon graphics without permission in his malware.&#8221;</p>
<p>The virus creator is a a 24 year old graduate student from Izumisano City in Osaka. It&#8217;s <a href="http://www.animenewsnetwork.com/news/2008-01-24/3-japanese-men-arrested-charged-with-uploading-anime">claimed</a> he illegally used copyrighted images from an anime television show to create the virus. </p>
<p>The other two members of the group &#8211; a 39 year old man from Osaka and a 35 year old man from Hyogo &#8211; were also arrested for copyright offenses, unrelated to the virus. The men are suspected of uploading anime episodes onto the Winny network.</p>
<p>One of the images from the virus includes a song about fish-shaped pancakes stuffed with jam, which makes about as much sense as arresting a virus creator for copyright infringement. But hey, this is the <a href="http://oil21.org/">21st century</a> &#8211; what did you expect?</p>
<p>Article from: <a href="http://torrentfreak.com">TorrentFreak</a>, check out our new blog at <a href="http://freakbits.com">FreakBits</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://torrentfreak.com/virus-creator-threatened-080124/feed/</wfw:commentRss>
		<slash:comments>63</slash:comments>
		</item>
		<item>
		<title>Bizarre Virus Threatens to Kill File-Sharers</title>
		<link>http://torrentfreak.com/bizarre-virus-threatens-to-kill-file-sharers/</link>
		<comments>http://torrentfreak.com/bizarre-virus-threatens-to-kill-file-sharers/#comments</comments>
		<pubDate>Thu, 01 Mar 2007 11:20:58 +0000</pubDate>
		<dc:creator>enigmax</dc:creator>
				<category><![CDATA[DRM and Other Evil]]></category>
		<category><![CDATA[P2P and Filesharing]]></category>
		<category><![CDATA[p2p]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[winny]]></category>

		<guid isPermaLink="false">http://torrentfreak.com/bizarre-virus-threatens-to-kill-file-sharers/</guid>
		<description><![CDATA[A strange virus which taunts file-sharers and threatens to report them to the police and even kill them, is being distributed on the <a href="http://en.wikipedia.org/wiki/Winny">Winny network</a>.]]></description>
			<content:encoded><![CDATA[<p><img src="http://torrentfreak.com//images/winnykills.jpg" title="if you don't stop within 0.5 seconds, i'm going to kill you!" align="right" alt="winny virus kills" />The virus has two variants Troj/Pirlames-A and Troj/Pirlames-B, masquerades as a screensaver and attacks files with these popular extensions &#8211; EXE, BAT, CMD, INI, ASP, HTM, HTML, PHP, CLASS, JAVA, DBX, EML, MBX, TBB, WAB, HLP, TXT, MP3, XLS, LOG, BMP &#8211; overwriting them with images of comic book character <a href="http://en.wikipedia.org/wiki/Ayu_Tsukimiya">Ayu Tsukimiya</a>.</p>
<p>It&#8217;s reported that one of the images, which includes a song about fish-shaped pancakes stuffed with jam, has a telephone number included although it&#8217;s unclear to whom the number belongs.</p>
<p>Another exclaims &#8220;This is a visit from the prevalent Piro virus! Stop P2P! If you don&#8217;t i&#8217;ll tell the police!&#8221; while another threatens &#8220;Ah, I see you are using P2P again&#8230;&#8230;<strong>if you don&#8217;t stop within 0.5 seconds, i&#8217;m going to kill you!</strong>&#8221;</p>
<p>Graham Cluley, a consultant for Sophos said of the virus &#8220;This is one of the <em>most bizarre pieces</em> of malware we have seen in our labs for quite some time, but it&#8217;s data-destroying payload is no laughing matter. It acts as a timely reminder to companies that they may want to control users&#8217; access to P2P file-sharing software not just because they can eat up bandwidth, but also because they can present a security risk to your corporate data.&#8221;</p>
<p>Winny is the most popular P2P application <a href="http://torrentfreak.com/filesharing-gains-popularity-in-japan/">in Japan</a>. In 2006 the developer of the Winny file-sharing software was found guilty and fined 1.5 million yen for assisting users in copyright violations.</p>
<p>Article from: <a href="http://torrentfreak.com">TorrentFreak</a>, check out our new blog at <a href="http://freakbits.com">FreakBits</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://torrentfreak.com/bizarre-virus-threatens-to-kill-file-sharers/feed/</wfw:commentRss>
		<slash:comments>36</slash:comments>
		</item>
		<item>
		<title>Anti-Piracy Trojan</title>
		<link>http://torrentfreak.com/anti-piracy-trojan/</link>
		<comments>http://torrentfreak.com/anti-piracy-trojan/#comments</comments>
		<pubDate>Tue, 16 May 2006 18:33:11 +0000</pubDate>
		<dc:creator>Ernesto</dc:creator>
				<category><![CDATA[All]]></category>
		<category><![CDATA[Anti-Piracy Gangs]]></category>
		<category><![CDATA[Hot Off The Press]]></category>
		<category><![CDATA[P2P and Filesharing]]></category>
		<category><![CDATA[Web Stuff]]></category>
		<category><![CDATA[bittorrent]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[mpaa]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[p2p]]></category>
		<category><![CDATA[trojan]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[warez]]></category>

		<guid isPermaLink="false">http://torrentfreak.com/anti-piracy-trojan/</guid>
		<description><![CDATA[Trojan/Erazer-A is a new trojan that spreads through P2P networks. Apart from infecting your pc with malware and disabling anti-virus applications, it also actively deletes music, video's and pictures from "shared folders', used by p2p applications.]]></description>
			<content:encoded><![CDATA[<p>Amazing&#8230;</p>
<p>First the MPAA&#8217;s <a href="http://TorrentFreak.com/mpaas-anti-piracy-dogs/">DVD sniffing dogs</a>, now <a href="http://www.sophos.com/virusinfo/analyses/trojerazera.html">a trojan</a> that&#8217;s targeting P2P content. Although the creators of the trojan are unknown until now, my guess is that the MPAA will be quite delighted.</p>
<p>Graham Cluley of Sophos, the company that discovered the virus, <a href="http://www.pcworld.idg.com.au/index.php/id;1036928739;fp;2;fpid;1">commented</a>:</p>
<blockquote><p>&#8220;The Erazer Trojan is a vigilante worthy of a Charles Bronson movie, taking the law into its own hands. However, it&#8217;s perfectly possible for the Trojan to aim poorly and wipe out innocent files too&#8221;.</p></blockquote>
<p>As far as I know BitTorrent is safe, for now.</p>
<p>Article from: <a href="http://torrentfreak.com">TorrentFreak</a>, check out our new blog at <a href="http://freakbits.com">FreakBits</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://torrentfreak.com/anti-piracy-trojan/feed/</wfw:commentRss>
		<slash:comments>15</slash:comments>
		</item>
	</channel>
</rss>
