Author Topic: They google for good & google for bad  (Read 2650 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
They google for good & google for bad
« on: July 10, 2006, 09:50:23 PM »
Hi malware fighters,

Malware launchers use Google to search for "signature 00004550" and this gives result pages with various links to executable files of malware. This because Google is indexing a file and parses the PE extention of the executable as the signature "4550"a NT signature for valid Win 32 PE files. In this way thousands of malicious binairies can be found. Time for Google to obscure this.
Source: Security NL

polonus

« Last Edit: July 10, 2006, 09:52:13 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48559
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: They google for good & google for bad
« Reply #1 on: July 11, 2006, 12:02:29 AM »
Sometimes these things are just posted to arrouse a fear factor.
Here's just one answer to this:
Quote
you'd have to be stupid enough to download the exe, then when IE tells you that the exe could contain viruses
(i assume FF does this too) you would have to ignore the warning and run it anyways.

So yeah you're right that most people on the internet should be on the lookout. (ie they are stupid enough to do the above)
You'll find some more Here
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet