I would say that yes, it's possible. but, only if the updates themselves are already infected.

Quote - In theory a virus can install a P2P server in your computer, but what files will go to share???

probably more along the lines of 'in practice the virus is a P2P server that shares itself and any other file it's had a chance to infect'. given a 55-75KB file size to the viral load, I can see a very simple P2P engine being strapped into the payload.

Quote - uses Gnutella protocol to spread through p2p clients like BearShare that implements this protocol."

yes, this is the primary worm-style transportation method. this would mean that it has its own ability to either automatically add itself to the share queue if you have a Gnutella-like P2P application running, or it has it's own P2P engine.

Quote - "From what I have been told I believe you have to be using a P2P programe and downloading pirated stuff in order to get this particular virus."

at first? yes. this is its preferred method of propegation. but once it's in the system it can propegate so long as an infected file moves between hosts. to borrow from arcady's example there's was an accepted primary transmission method, but there were ancilliary methods. this is no different.

Quote - so this is not a virus you get from visiting a website  but you have to open an infected exe or scr file to get it?

now? yes, it's possible if you download and execute. DAZ* was catching much flack over the weekend as people who were already infected from another source were getting hits from the EXEs they were downloading as polipos was infecting them as they arrived.

*DAZ has since made sure that they did not have infected installers in their distribution chain.

Quote - Paranoid? No.Unless you remove power from memory, nothing is going to force it to empty out other than the software of the OS - which can be easily targetted and told to do otherwise. Merely using restart or shutdown doesn't necessarily remove power.

paranoid? yes.

we're not using bloody spintronics to make RAM yet. and when we do, you'll have to use a very powerful EM field - think MRI machine - to wipe the stuff. power down and it gets wiped. even then, when the system comes back up it will test it to make sure it's good. if that doesn't replace it's contnents then the OS loading up will. polipos NEEDS windows to run, it's not OS independant and doesn't show signs of infecting the boot sector yet. even if it could survive in RAM between boots, when Windows comes up it's memory mapping tables are compleatly empty, even the stuff for swap. It would be over written as the memory was filled up.

:-|

restart? maybe. my systems will still perform most of POST when they reboot. and the OS will come up with empty memory tables.
shutdown? yes. this terminated power to all but the "important" system components:

• WoL NIC (for remote management)
• WoR Modem (for FAX servers)
• CMOS (for power on at a specified time)

sometimes paranoia is usefull, this isn't one of those times, and I'm kicking myself for helping to stoke the fire.

want to avoid most computer security problems? get a Mac they have a low user volume. otherwise get a really obscure system like a Sun, SGI, or HP (IA64, HP-PA, or Alpha). to really avoid these problems get rid of the little blighter. :laugh:

yes, you don't need to pull the RAM. cycle the system's power once and it's all gone. I've had many occasions where the only thing that stopped me from picking up scads of inexpensive RAM was some cockamami policy handed down from the CIO that all storage media had to be destroyed before the computer was surplussed.

in my other post I know I said "might not need to", that should have read "you don't need to". I forget that smileys don't quite communicate what they used to :mellow:

my steps would be:

• archive
• 4, 11, 12, 14, 17, 18.
• restore

Quote - What some are suggesting is to remove the battery that keeps your CPU clock up to date. That too is probably an over-reaction, but there are viruses out there that can hide in the ram used by that clock...

I did say we were being paranoid :laugh:
and yes, that's why, I've known of a few that like to hang out  in the unused memory located just behind the RTC in it's allocated window.

I would never suggest pulling the system RAM unless it was absolutly nesecary. it's just too dangerous for people who've never done it before. pulling the battery is IMO a bit over the top as well as I can't remember any infectious software that has used that particular trick in ages.

what really irks me about polipos is that it looks, from what I've read, that it's able to perform thread injection into other processes.

Attached Link: http://www.celsys.co.jp/

If I'm guessing correctly, Manga Studio is the new (english) version of CelSys' ComicStudio product. It's basically a professional comic layout programme. While it has the ability to import 3D objects, it's real strength lies in 2D.

IIRC Morph Loader was intended to be used to load an external (eg. shipped as an .OBJ) morph target. I was quite happy when the AS Free Faces finally started working with 1.2.0.0, and they're just a set of CR2s.

must have broken them at some point... I could swear paragraph three (in the description) is mentioning which FBMs are available :/ ... or I'm going insane again :P

just out of curiosity, has anyone else been having problems with the FBMs in his FG-X freebie in D|S 1.0.1.0?

That got me for a bit as well. You have to register with OddDitty in order to get access to the freebies.

I knew I recognised him from somewhere! I should have gone rummaging through my comic collection :P

Attached Link: http://www.renderosity.com/messages.ez?ForumID=12356&Form.ShowMessage=2190599

Message edited on: 03/31/2005 20:09