<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:media="http://search.yahoo.com/mrss/"
	>

<channel>
	<title>Snowhite14's Weblog</title>
	<atom:link href="http://snowhite14.wordpress.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://snowhite14.wordpress.com</link>
	<description>Internet Security &#38; Safety Tips</description>
	<lastBuildDate>Wed, 23 Jul 2008 00:15:06 +0000</lastBuildDate>
	<generator>http://wordpress.com/</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<cloud domain='snowhite14.wordpress.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<image>
		<url>http://www.gravatar.com/blavatar/5a12696579f724ab790a5cee4fa8c75b?s=96&#038;d=http://s.wordpress.com/i/buttonw-com.png</url>
		<title>Snowhite14's Weblog</title>
		<link>http://snowhite14.wordpress.com</link>
	</image>
			<item>
		<title>The Secret Plan To Kill Internet</title>
		<link>http://snowhite14.wordpress.com/2008/07/16/the-secret-plan-to-kill-internet/</link>
		<comments>http://snowhite14.wordpress.com/2008/07/16/the-secret-plan-to-kill-internet/#comments</comments>
		<pubDate>Wed, 16 Jul 2008 22:31:14 +0000</pubDate>
		<dc:creator>snowhite14</dc:creator>
				<category><![CDATA[Malware]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[PIDIEF Trojan]]></category>
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://snowhite14.wordpress.com/2008/07/16/the-secret-plan-to-kill-internet/</guid>
		<description><![CDATA[For some time now, articles summing up rumors about the predicted death of the Internet as we know it, by 2012,
and claiming that ISP&#8217;s have come to an agreement to restrict Internet use by turning it into a pay to view subscription model,
have been circulating on the Internet.
These articles, claiming users would be able to [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=snowhite14.wordpress.com&blog=2596089&post=8&subd=snowhite14&ref=&feed=1" />]]></description>
			<content:encoded><![CDATA[<div class='snap_preview'><br /><p>For some time now, articles summing up rumors about the predicted death of the Internet as we know it, by 2012,<br />
and claiming that ISP&#8217;s have come to an agreement to restrict Internet use by turning it into a pay to view subscription model,<br />
have been circulating on the Internet.<br />
These articles, claiming users would be able to visit only selected corporate websites, was in some cases accompanied by a <a href="http://ipower.ning.com/netneutrality2">YouTube clip</a>,  and stating that Time Magazine writer &#8220;Dylan Pattyn&#8221; has confirmed the information and is about to release an article on the issue.</p>
<p>These stories are now followed by a new spam, tricking users to download an attachment which supposedly has documented information regarding the doomed future of Internet.</p>
<p>The file &#8220;doc.pdf&#8221; is actually a variant of PIDIEF Trojan, more specifically  <a href="http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_PIDIEF.JT&amp;VSect=P">TROJ_PIDIEF.JT</a>.</p>
<p>If the file is opened, it tries to exploit an  <a href="http://secunia.com/advisories/30832">Adobe/Acrobat Vulnerability</a>,  and if it succeeds then attempts to contact an FTP site so it can download more malware to the infected computer.</p>
<p>If you see an email with subjects like the following lines:</p>
<p>Secret Plan To Kill Internet By 2012: Leaked?</p>
<p>PLAN TO KILL THE INTERNET BY 2012- Documented</p>
<p>2012: The year the Internet as we know it dies&#8230;</p>
<p>or anything with similar context, do not open the email, delete it.</p>
<p>Source: <a title="Death of the Internet Foretold" rel="bookmark" href="http://blog.trendmicro.com/death-of-the-internet-foretold/"><span class="post_h2_a">Death of the Internet Foretold</span></a> by TrendLabs malware blog.</p>
<p style="display:none;">altiparmaks@gmail.com</p>
<img alt="" border="0" src="http://feeds.wordpress.com/1.0/categories/snowhite14.wordpress.com/8/" /> <img alt="" border="0" src="http://feeds.wordpress.com/1.0/tags/snowhite14.wordpress.com/8/" /> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/snowhite14.wordpress.com/8/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/snowhite14.wordpress.com/8/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/snowhite14.wordpress.com/8/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/snowhite14.wordpress.com/8/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/snowhite14.wordpress.com/8/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/snowhite14.wordpress.com/8/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/snowhite14.wordpress.com/8/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/snowhite14.wordpress.com/8/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/snowhite14.wordpress.com/8/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/snowhite14.wordpress.com/8/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=snowhite14.wordpress.com&blog=2596089&post=8&subd=snowhite14&ref=&feed=1" /></div>]]></content:encoded>
			<wfw:commentRss>http://snowhite14.wordpress.com/2008/07/16/the-secret-plan-to-kill-internet/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://1.gravatar.com/avatar/fa2ee491fb93bbcd0a11890f5720349a?s=96&#38;d=identicon" medium="image">
			<media:title type="html">snowhite</media:title>
		</media:content>
	</item>
		<item>
		<title>Chunkylover53 is away.. and Homer is back with a botnet</title>
		<link>http://snowhite14.wordpress.com/2008/07/14/chunkylover53-is-away-and-homer-is-back-with-a-botnet/</link>
		<comments>http://snowhite14.wordpress.com/2008/07/14/chunkylover53-is-away-and-homer-is-back-with-a-botnet/#comments</comments>
		<pubDate>Mon, 14 Jul 2008 16:31:10 +0000</pubDate>
		<dc:creator>snowhite14</dc:creator>
				<category><![CDATA[Botnet]]></category>
		<category><![CDATA[Instant Messaging]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Aim]]></category>
		<category><![CDATA[Aol]]></category>
		<category><![CDATA[Botnets]]></category>
		<category><![CDATA[Homer]]></category>

		<guid isPermaLink="false">http://snowhite14.wordpress.com/2008/07/14/chunkylover53-is-away-and-homer-is-back-with-a-botnet/</guid>
		<description><![CDATA[A malware spreading through AIM network using as screen name &#8220;Chunkylover53&#8243;, which was the username registered by one of the writers of &#8220;The Simpsons&#8221; episodes, is infecting Simpsons fans.. In one of the old episodes &#8220;Chunkylover53@aol.com&#8221; was Homer&#8217;s e-mail address, many of the fans added the username to their AIM contact lists. The writer who [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=snowhite14.wordpress.com&blog=2596089&post=3&subd=snowhite14&ref=&feed=1" />]]></description>
			<content:encoded><![CDATA[<div class='snap_preview'><br /><p>A malware spreading through AIM network using as screen name &#8220;Chunkylover53&#8243;, which was the username<em> </em>registered by one of the writers of &#8220;The Simpsons&#8221; episodes, is infecting Simpsons fans.. In one of the old episodes &#8220;Chunkylover53@aol.com&#8221; was Homer&#8217;s e-mail address, many of the fans added the username to their AIM contact lists. The writer who registered this account also was answering e-mails from fans.. Now, after long inactivity &#8220;Homer&#8221; is back with an away message linking to the &#8220;new internet-only exclusive Simpson&#8217;s episode&#8221;, yeah right.. The so called &#8220;new episode&#8221; is actually a file called <a href="http://www.spywareguide.com/spydet_31515_kimya.html">Kimya.exe</a> detected as a trojan. Running it will set you up with a couple of uninvited guests, a rootkit, some files related to a new <a href="http://www.spywareguide.com/product_show.php?id=5470">Chinese infection</a>, your PC will fall victim to a botnet of Turkish origin.</p>
<p>The &#8220;Homer&#8221; person spreading this infection, has already changed the away message a couple of times. The last message also advertises a link to a dating website, just in case you want to get laid..</p>
<p>There is an interesting write up with more detailed info at <a href="http://blog.spywareguide.com/2008/07/who-hacked-homer.html">FaceTime Security Labs Blog</a></p>
<p><em></em></p>
<p style="display:none;">altiparmaks@gmail.com</p>
<img alt="" border="0" src="http://feeds.wordpress.com/1.0/categories/snowhite14.wordpress.com/3/" /> <img alt="" border="0" src="http://feeds.wordpress.com/1.0/tags/snowhite14.wordpress.com/3/" /> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/snowhite14.wordpress.com/3/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/snowhite14.wordpress.com/3/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/snowhite14.wordpress.com/3/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/snowhite14.wordpress.com/3/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/snowhite14.wordpress.com/3/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/snowhite14.wordpress.com/3/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/snowhite14.wordpress.com/3/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/snowhite14.wordpress.com/3/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/snowhite14.wordpress.com/3/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/snowhite14.wordpress.com/3/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=snowhite14.wordpress.com&blog=2596089&post=3&subd=snowhite14&ref=&feed=1" /></div>]]></content:encoded>
			<wfw:commentRss>http://snowhite14.wordpress.com/2008/07/14/chunkylover53-is-away-and-homer-is-back-with-a-botnet/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
	
		<media:content url="http://1.gravatar.com/avatar/fa2ee491fb93bbcd0a11890f5720349a?s=96&#38;d=identicon" medium="image">
			<media:title type="html">snowhite</media:title>
		</media:content>
	</item>
	</channel>
</rss>