Re: [Full-Disclosure] 45% of the free files collected via KaZaA contained malware

From: Michael Renzmann (security_at_dylanic.de)
Date: 01/09/04

  • Next message: William Warren: "Re: [Full-Disclosure] New Swen worm lookalike appeared, may be big!" 
    To: Bernardo Quintero <bernardo@hispasec.com>
Date: Fri, 09 Jan 2004 16:12:07 +0100

    Hi.

    Bernardo Quintero wrote:
    >>Impossible .... At least 90% of the files on KaZaA are media files
    ... (non
    >>executable files)
    >>I know there's a lot of bad .exe's on kazaa ... But 45% just can't be
    right
    > Obviously.

    I'm no native english speaker, but... the way I understood the original
    headline is: 45% of the files that get _downloaded_ contain malware. The
    fact that more than 90% of the hosted files are non-executable media
    files does not mean that these type of files also make up 90% of the
    things that get downloaded. It could well be that the relatively small
    amount of "potentially executable" files are overly proportional often
    downloaded from KaZaA.

    Nevertheless, it would be interesting to learn more about the
    methodology that has been used for this report.

    Bye, Mike

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: William Warren: "Re: [Full-Disclosure] New Swen worm lookalike appeared, may be big!"