• Winny virus writer arrested
  • Winny virus writer arrested
    Written by battye
    Fri Jan 25, 2008 6:03 am

    Japanese authorities have stated that three people have been arrested for writing and distributing a virus over Japan's top P2P program, Winny. The creator of the virus is believed to be a graduate student from Osaka. This is the first such occasion that somebody in Japan has been arrested due to virus creation.

    The virus which was written in the programming language Visual Basic was named Harada. It deceived its victims by posing as a screensaver of a popular anime show, thus making it more likely for someone to download.

    Infected computers display a message saying "You're already dead. Come here. And apologize to me. If you don't, this PC will self-destruct.". Early variants of the virus show a picture of a man, "Harada", criticizing the use of P2P to share copyrighted material. Ironically, the people were technically arrested due to the copyright violations of displaying the anime images, because no computer crime laws are in place in Japan to take virus writing.

    Several other side-effects occur as a result of infection. Sometimes, this could include several important system files being deleted, as well as the virus deleting any music and video files which have potentially been downloaded from the Winny software. There have also been reports of the picture of the man replacing such music and video files.

    There are currently over 70 variations of the virus according to security firm McAfee. While all are similar in structure, not all of them can be linked back to original author. McAfee anti-virus detects the virus as the Del-500 trojan and the Uploader-AH trojan, while Norton and Kaspersky recognise it as Trojan.Pilames and Trojan.Win32.VB.axa respectively.

    This is not the first time that Winny has been on the receiving end of some bizarre circumstances. In the past 4 years, there have been several occasions of private documents being leaked on the P2P network, such as secret power plant reports and private police most wanted lists.

    More information can be found at the McAfee website: http://vil.nai.com/vil/content/v_141567.htm
  • Article search