that kazaa virus

[schmooky007]

Creator Says Kazaa Benjamin Worm Means Well
By Brian McWilliams, Newsbytes May 20 2002 1:59PM

The creators of a new worm that targets users of the Kazaa file-trading network say they released the code to frustrate Internet users searching for pirated software and child pornography.

Anti-virus software vendors have issued warnings that the so-called "Benjamin worm" is being unintentionally propagated among Kazaa users who download any of dozens of executable programs and screen savers that have been infected with the malicious code.

According to one of its developers, Paul Komoszki, Benjamin is a "controlled test" of a program designed to disrupt the illegal exchange of copyrighted data and child porn over peer-to-peer networks.

"We do not want to affect the exchange of legal programs and legal music files. Only users who are looking for and sharing copyrighted files could be infected," said Komoszki in an e-mail interview today.

Once it infects a Kazaa user's computer, Benjamin creates numerous copies of itself under file names that may be of interest to other Kazaa users, according to anti-virus firms. Examples include borlanddelphi-full-downloader.exe and Braveheart-Special Edition-divx.exe, according to Kaspersky Labs.

"After a few months it could be that there are more Benjamin files in p2p networks than warez files ... Within a few days Benjamin has spread very far in these illegal networks," said Komoszki.

After creating a special directory on a victim's computer and filling it with infected files, Benjamin contacts a Web site in Germany to display a pop-up advertisement, Kaspersky said.

The site, operated by Komoszki, has been disabled "due to massive abuse" according to a message at the page today.

According to Komoszki, the pop-up was intended to generate income for the malicious program's creators and to fund the "advancement" of future versions of the software.

Kazaa representatives did not respond to requests for information.

Kazaa users can protect themselves from executable programs that contain Trojan horses by specifying that file types such as exe, scr, and vbs be excluded from their search requests.

Kaspersky's write-up on Worm.Kazaa.Benjamin is at http://www.viruslist.com/eng/viruslist.html?idI790 .

Reported by Newsbytes, http://www.newsbytes.com .

so.. the people behind "benjamin" claim to have written this virus to "disrupt the illegal exchange of copyrighted data and child porn over peer-to-peer networks." and then, once its installed on the computer, without the user's consent, the program contacts a web server hosting a pop up advertisement so that the authors could generate "income" for further research?? wtf is that all about?!

[Mowzer]

Its about a virus writer, trying to see if he could actually get ad revenue from a virus.

I think there goal is some screwy kind of adware spyware.

I dont like it when people try to disrupt the flow of the net and peoples freedom on it. The purpose of the internet is to prevent communism in north america.

[BuzzB2K]

After creating a special directory on a victim's computer and filling it with infected files, Benjamin contacts a Web site in Germany to display a pop-up advertisement, Kaspersky said.

The site, operated by Komoszki, has been disabled "due to massive abuse" according to a message at the page today.

I guess things got a little out of hand...

[schmooky007]

Originally posted by BuzzB2K


I guess things got a little out of hand...

i really hope so because the kunt shouldn't get paid for creating and distributing a malicious virus. the advertising firm responsible for delivering the ads should close his referral account immediately!!

[theknife]

"After a few months it could be that there are more Benjamin files in p2p networks than warez files ... ", said Komoszki.

well, correct me if I am wrong (and I'm sure somebody will) since this virus eats up your hard drive space in a matter of minutes, anybody who gets it will be forced to eradicate it almost immediately. Therefore, I would think it's long term effects would be neglible, as people get it, get rid of it, and go back to trading a little wiser.


...people like me, for example

...and incidentally, this guy is full of shit, because this virus replicated into files with the names of popular songs, as well as software titles and media files. So the intent had to also be to spread it to online music traders as well.