Streamerp2p Forum

Streamer P2P Radio Support ForumStreamer Mainpage www.streamerp2p.com
It is currently Thu May 23, 2013 1:40 pm

All times are UTC - 6 hours




Post new topic Reply to topic  [ 7 posts ] 
Author Message
 Post subject: [SOLVED] Listener claims they got a WORM/VIRUS after downl..
PostPosted: Tue Sep 12, 2006 5:10 pm 
Offline
Forum Newbie

Joined: Tue Sep 12, 2006 4:55 pm
Posts: 4
Hi,

I don't think this actually happened, or I think she's getting a false antivirus flag or something, but here's an email I got today:

"Jason,

I just wanted to let you know that there's a problem with your online streaming (listen live). I got a worm/virus today from it and it completely shut down my computer here at work. ITS had to come over and wipe out everything and I didn't get back to working for over 2 hours. I'm not the only one to have this problem either because a couple others on the Graffiti Wall have mentioned this too. "

Any thoughts or comments for this listener?

Thank you in advance...

Jason
http://www.q1520radio.com


Top
 Profile  
 
 Post subject:
PostPosted: Tue Sep 12, 2006 5:45 pm 
Offline
Site Admin
User avatar

Joined: Sun Oct 10, 2004 6:00 pm
Posts: 572
Location: Panama
Hightly unlikely.

The installer and activex are digitally signed, and cannot be tampered with or altered in any way without the user getting a big red warning from windows when they try and run it. This is what digital signing is for.

Can I see the actual allegedly infected file please?, and the name/id of the worm/virus that was found, and what virus scanner is flagging the alert.

A false positive has happened before with one virus checker, but a false positive doesn't shut down a pc.


Top
 Profile  
 
 Post subject:
PostPosted: Tue Sep 12, 2006 7:36 pm 
Offline
Forum Newbie

Joined: Tue Sep 12, 2006 4:55 pm
Posts: 4
Someone posted this note in reply to me asking a question about anyone else having similar problems (since the email said others did too):

"I saw mention of 3 people who mentioned a worm/virus. They were Mommax5, Imdeetoo, and Glassa. They all posted threads concerned about listen live through WQMA. From what I understand Norton caught it, for Momma...and the others sound like it effected their computers.

Thanks for looking out for us Jason :)"

The forum I'm getting this from is here:

http://www.steveanddc.com/wfapp/user?AC ... leID=12976

Thanks again for any ideas but I've passed along your belief that it's not too likely to be caused by the software... First time I've ever gotten a report like that, however. Those three are regular posters at that site so I don't believe it's some kind of prank. But I'm still hoping for a false positive, combined with a different computer problem maybe...

Still I wanted to report here in case...

Jason


Top
 Profile  
 
 Post subject:
PostPosted: Wed Sep 13, 2006 7:49 am 
Offline
Site Admin
User avatar

Joined: Sun Oct 10, 2004 6:00 pm
Posts: 542
Location: Missouri, USA
After reading through the post this morning, I found one listener posted the exact warning message which was what I suspect when I first saw this topic...

Quote:
MEDIUM RISK!

Norton Internet Worm Protection has detected & blocked an intrusion attempt.

intrusion: Invalid Destination Port
intruder: MYCOMPUTER (70.130.156.145)
risk level: medium
source IP address: (70.130.156.145)
destination IP address: (*mine)
UDP source: 8466
UDP destination port: 0. invalid


This is in bug that has been in Streamer for many versions now but is we think fixed in the version about to be released. It occurs when Streamer erroroneously tries to send a packet from port 8466 to port 0 on another computer running Streamer. IT is NOT a virus or a hack attempt. It's a small bug which until recently was being very elusive for the developer.

Any other symptoms that might have happened when this warning popped up is pure coincidence. If Streamer is not installed manually with a download and run, activeX component is designed to install Streamer in the users TEMP folder. This is what gives the listener a click and listen experience.

If you use the click and run activeX on XP or I think Windows 2k, you will find ALL of the files for Streamer have been put into c:\Documents and Settings\[user]\Local Settings\Temp\streamer.

_________________
Streamerp2p Operations
http://www.streamerp2p.com


Top
 Profile  
 
 Post subject:
PostPosted: Wed Sep 13, 2006 2:55 pm 
Offline
Streamer Nerd
Streamer Nerd
User avatar

Joined: Sun Oct 10, 2004 6:00 pm
Posts: 116
Location: Dont bother me, I'm through with it.
just as a reference, the other thread about the Port 0 problem is here : http://www.streamerp2p.com/forum/viewtopic.php?t=1783


Top
 Profile  
 
 Post subject: Another one !!
PostPosted: Mon Nov 13, 2006 7:44 am 
Offline
Forum Newbie

Joined: Mon Nov 13, 2006 7:39 am
Posts: 1
Just to let you know that I got exactly the same problem when I installed streamer today.

Norton came on and said that I had a worm detected.

Luckily, I noticed this thread on the forum and my heart rate has now returned to normal !!

_________________
Presenter of TMRS (The Melodic Rock Show) Royal 1, Glasgow (www.royal1radio.org) and real hit radio (www.realhitradio.co.uk)


Top
 Profile  
 
 Post subject: SOLVED
PostPosted: Mon Nov 13, 2006 10:51 am 
Offline
Streamer Nerd
Streamer Nerd
User avatar

Joined: Sun Oct 10, 2004 6:00 pm
Posts: 740
Location: Germany
I added a big [SOLVED] in front of the Topic of the original posting. Looks much better and less scary :wink:
Quote:
Image



McAfee SiteAdvisor: absolute save
http://www.siteadvisor.com/sites/streamerp2p.com

_________________
Streamer P2P Radio Germany http://streamerp2p.de
IRC: #streamerp2p - irc.freenode.net


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

All times are UTC - 6 hours


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group