The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    NEWS : Leaked Copies of Windows 7 RC Contain Trojan

    Discussion in 'Security and Anti-Virus Software' started by Tinderbox (UK), May 5, 2009.

  1. Tinderbox (UK)

    Tinderbox (UK) BAKED BEAN KING

    Reputations:
    4,745
    Messages:
    8,513
    Likes Received:
    3,823
    Trophy Points:
    431
    Leaked Copies of Windows 7 RC Contain Trojan

    Pirated copies of Windows 7 Release Candidate (RC) on file-sharing sites contain malware, according to users who have downloaded the upgrade.

    Windows 7 RC, which Microsoft Corp. will officialy launch tomorrow, leaked two weeks ago, with copies first appearing on BitTorrent tracking sites on April 24.

    Some of the pirated builds include a Trojan horse, numerous users said in message forums and in comments on BitTorrent sites such as Mininova.org.

    "Just a warning for anyone downloading the new RC builds of windows 7. Quiet [sic] a lot of the downloads have a trojan inbedded [sic] in the setup EXE," said someone identified as Frank Fontaine on a Neowin.net discussion thread. "The Setup EXE is actually a container, it appears to be a self-extracting EXE. There are 2 files inside, Setup.exe and codec.exe."

    Fontaine's antivirus software identified the "codec.exe" file as a generic Trojan.

    "Suspicious codec.exe!" reported someone labeled as "UltimateGTR" on Mininova, commenting on one of the 32-bit builds.

    Another Mininova commenter, "WuNgUn," identified the malware as the "Falder" Trojan, which downloads fake security software, dubbed "scareware," to PCs and installs a rootkit to hide from legitimate antivirus products.

    Microsoft, which has cited potential infection as a reason to steer clear of unauthorized downloads, jumped on the news. "This unfortunately shows that there are those out there who see the significant interest in something such as Windows 7 as an opportunity to try to take advantage of others," said Alex Kochis, director of Microsoft's Genuine Windows anti-piracy technology group, in a post to a company blog on Friday.

    Windows 7 RC is not the first leaked software found to harbor attack code. In January 2009, for example, security experts warned that pirated copies of Apple Inc.'s then-new iWork '09 suite contained a Trojan horse that hijacked Macs.

    Microsoft will let the general public download Windows 7 RC on Tuesday, but has not said what time it will make the upgrade available. Subscribers to TechNet and the Microsoft Developers Network (MSDN) have been allowed to download the RC since last Thursday.

    http://www.pcworld.com/article/164348/windows_7_trojan.html?tk=rss_news
     
  2. Stella

    Stella Notebook Deity NBR Reviewer

    Reputations:
    173
    Messages:
    710
    Likes Received:
    1
    Trophy Points:
    31
    It's a shame, but no real surprise . . .
     
  3. Angelic

    Angelic Kickin' back :3

    Reputations:
    4,496
    Messages:
    2,075
    Likes Received:
    0
    Trophy Points:
    55
    O great, now I have to run a scan... :(
     
  4. AKAJohnDoe

    AKAJohnDoe Mime with Tourette's

    Reputations:
    1,163
    Messages:
    3,017
    Likes Received:
    0
    Trophy Points:
    105
    Surely not on the torrents! Lol!
     
  5. Angelic

    Angelic Kickin' back :3

    Reputations:
    4,496
    Messages:
    2,075
    Likes Received:
    0
    Trophy Points:
    55
    Yeah, it was pretty obvious. Good thing mine was clean...
     
  6. ATC

    ATC Notebook Deity

    Reputations:
    245
    Messages:
    1,278
    Likes Received:
    0
    Trophy Points:
    55
    If the downloaded iso from torrents checks out with the official SHA1 and MD5 checksums, can it still be affected?
     
  7. MaXimus

    MaXimus Notebook Deity

    Reputations:
    432
    Messages:
    1,906
    Likes Received:
    0
    Trophy Points:
    0
    That is why I only download from Microsoft themselves when it comes to an OPERATING SYSTEM
     
  8. built

    built Notebook Deity

    Reputations:
    108
    Messages:
    825
    Likes Received:
    0
    Trophy Points:
    30
    What a shock. :eek:

    Not.

    Torrents are filled with trojans, etc.