PC Mag utilities found on ftp mirror

  • Thread starter Thread starter Pixeler
  • Start date Start date
P

Pixeler

I've been lurking in this great group for a while greatly enjoying the
contributions and posting of everyone. This may be my chance to give back.

While hunting down one of the hard-to-find PCMag utlities, I used an FTP
search engine (that ironically was posted in this forum). Lo and Behold it
turned up the following link which appears to be a PCMag ftp mirror directory
that accepts anonymous login.

ftp://ftp.mpoli.fi/pub/mirrors/ftp.pcmag.com/archives/

It seems to have all the PCMag utilities and story related data files from
2003 back to the 1980's.

As this appears to be a legit pcmag mirror, we're following the letter of
their licensing agreement by downloading from them!

Most of the hard to find goodies are in there. Hope this helps!
 
Pixeler said:
I've been lurking in this great group for a while greatly enjoying the
contributions and posting of everyone. This may be my chance to give back.

While hunting down one of the hard-to-find PCMag utlities, I used an FTP
search engine (that ironically was posted in this forum). Lo and Behold it
turned up the following link which appears to be a PCMag ftp mirror directory
that accepts anonymous login.

ftp://ftp.mpoli.fi/pub/mirrors/ftp.pcmag.com/archives/

It seems to have all the PCMag utilities and story related data files from
2003 back to the 1980's.

As this appears to be a legit pcmag mirror, we're following the letter of
their licensing agreement by downloading from them!

Most of the hard to find goodies are in there. Hope this helps!
Click to expand...

Thanks!
 
All I ever get is:
530 Sorry, the maximum number of allowed clients (10) are already connected.
Retry: Wait 30 sec

Disappointing.
 
Phoenix said:
All I ever get is:
530 Sorry, the maximum number of allowed clients (10) are already connected.
Retry: Wait 30 sec
Click to expand...

Used FileZilla to log on yesterday. Downloaded everything I wanted. Keep
trying. Did you use an FTP proggie or IE?

m
 
I was unable to download...no password or username...

Could some one teach me the trick of downloading...while the downloading is
good...or, email them to me...at normanNOSPAMCOHENatquidnunc.net

delete the nospam and replate at with @
 
(e-mail address removed) (Pixeler) wrote in
ftp://ftp.mpoli.fi/pub/mirrors/ftp.pcmag.com/archives/

It seems to have all the PCMag utilities and story related data files
from 2003 back to the 1980's.
Click to expand...

I've been trying using both WS-FTP and FireFTP. I get an instant "no
connection" with both. Looks like it's offline now.
 
how did you log on???


Michael Laplante said:
Used FileZilla to log on yesterday. Downloaded everything I wanted. Keep
trying. Did you use an FTP proggie or IE?

m
Click to expand...
 
Qwest said:
how did you log on???
Click to expand...

I also logged on with IE (which can function as an FTP client). Simply copy
/ type the URL in the address bar as it appeared in the original poster's
message and away you go. I did find it very slow though. I dl'd one file,
then everything just kinda slowed to a stop.

In FileZilla, simply paste the URL into the address box, press the
'QuickConnect' button and off you go again. FileZilla fills in the User Name
with Anonymous. It also fills in the Password with some default that I can't
read cuz its in asterisks but I assume its Guest since it has five letters.

I just tested it and am connected right now so should be good to go.

M
 
Pixeler wrote:
the following link which appears to be a PCMag ftp mirror directory
that accepts anonymous login.

ftp://ftp.mpoli.fi/pub/mirrors/ftp.pcmag.com/archives/

It seems to have all the PCMag utilities and story related data files from
2003 back to the 1980's.
Click to expand...

An interesting site. A cursory scan of four folders (2000 - 2003)
found two _potential_ problems:
AVG (0),
AntiVir (2),
avast!(0),
ClamWin(2),
ewido (0),
McAfee (0), and
a-squared (0)

I submitted both to VirusTotal and VirusScan.Jotti. Note that I did
NOT test other folders, that I ignored several warnings, and finally
that these may be false positives. An interesting quirk: Kaspersky
Windows and Linux results differ.

2001\0320\keytick.zip
2001\0320\Vol20No06.zip


keytick.zip VirusTotal Results

Antivirus Version Update Result
AntiVir 6.30.0.7 04.29.2005 no virus found
AVG 718 04.29.2005 no virus found
BitDefender 7.0 04.29.2005 Backdoor.Badcodor.B
ClamAV devel-20050307 04.30.2005 Trojan.Bancodor-3
DrWeb 4.32b 04.30.2005 no virus found
eTrust-Iris 7.1.194.0 04.30.2005 no virus found
eTrust-Vet 11.7.0.0 04.29.2005 no virus found
Fortinet 2.51 04.30.2005 W32/Spider.E-tr
F-Prot 3.16b 04.28.2005 no virus found
Ikarus 2.32 04.29.2005 no virus found
Kaspersky 4.0.2.24 04.30.2005 no virus found
McAfee 4480 04.29.2005 no virus found
NOD32v2 1.1084 04.30.2005 no virus found
Norman 5.70.10 04.29.2005 Bancodor.B
Panda 8.02.00 04.30.2005 no virus found
Sybari 7.5.1314 04.30.2005 Backdoor.Bancodor.AI
Symantec 8.0 04.30.2005 no virus found
VBA32 3.10.3 04.29.2005 no virus found


keytick.zip VirusScan.Jotti Results

AntiVir Found Worm/Bancodor.U.3
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found Backdoor.Badcodor.B
ClamAV Found Trojan.Bancodor-3
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found W32/Spider.E-tr
Kaspersky Anti-Virus Found not-a-virus:Tool.Win32.Reboot
mks_vir Found nothing
NOD32 Found nothing
Norman Virus Control Found Bancodor.B
VBA32 Found nothing


Vol20No06.zip VirusTotal Results

Antivirus Version Update Result
AntiVir 6.30.0.7 04.29.2005 no virus found
AVG 718 04.29.2005 no virus found
BitDefender 7.0 04.29.2005 Backdoor.Badcodor.B
ClamAV devel-20050307 04.30.2005 Trojan.Bancodor-3
DrWeb 4.32b 04.30.2005 no virus found
eTrust-Iris 7.1.194.0 04.30.2005 no virus found
eTrust-Vet 11.7.0.0 04.29.2005 no virus found
Fortinet 2.51 04.30.2005 W32/Spider.E-tr
F-Prot 3.16b 04.28.2005 no virus found
Ikarus 2.32 04.29.2005 no virus found
Kaspersky 4.0.2.24 04.30.2005 no virus found
McAfee 4480 04.29.2005 no virus found
NOD32v2 1.1084 04.30.2005 no virus found
Norman 5.70.10 04.29.2005 Bancodor.B
Panda 8.02.00 04.30.2005 no virus found
Sybari 7.5.1314 05.01.2005 Bancodor.
Symantec 8.0 04.30.2005 no virus found
VBA32 3.10.3 04.29.2005 no virus found


Vol20No06.zip VirusScan.Jotti Results

AntiVir Found Worm/Bancodor.U.3
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found Backdoor.Badcodor.B
ClamAV Found Trojan.Bancodor-3
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found W32/Spider.E-tr
Kaspersky Anti-Virus Found not-a-virus:Tool.Win32.Reboot
mks_vir Found nothing
NOD32 Found nothing
Norman Virus Control Found Bancodor.B
VBA32 Found nothing
 
How did you log on???

Total Commander, new ftp connection, usual anonymous email address, standard
port.
I think it's just busy (?)
 
Pixeler wrote:
the following link which appears to be a PCMag ftp mirror directory that
accepts anonymous login.
ftp://ftp.mpoli.fi/pub/mirrors/ftp.pcmag.com/archives/
It seems to have all the PCMag utilities and story related data files from
2003 back to the 1980's.

Finally got-in and grabbed InCtrl5. That'll do me.
/archives/2000/1205/

Just busy, I guess. Huge list of subdirectories, looks like complete
magazine issues.
Maybe useful for reading offline if you want (?)

I hope to Christ this is legal...
 
On Fri, 29 Apr 2005 15:00:10 GMT, Pixeler wrote:

I used SmartFTP with no problems. Filezilla timed out. One you're
connected, the transfers are fast. My virus scanner McAfee issued no
alerts.
 
BillR said:
Pixeler wrote:


An interesting site. A cursory scan of four folders (2000 - 2003)
found two _potential_ problems:
AVG (0),
AntiVir (2),
avast!(0),
ClamWin(2),
ewido (0),
McAfee (0), and
a-squared (0)

I submitted both to VirusTotal and VirusScan.Jotti. Note that I did
NOT test other folders, that I ignored several warnings, and finally
that these may be false positives. An interesting quirk: Kaspersky
Windows and Linux results differ.

2001\0320\keytick.zip
2001\0320\Vol20No06.zip


keytick.zip VirusTotal Results

Antivirus Version Update Result
AntiVir 6.30.0.7 04.29.2005 no virus found
AVG 718 04.29.2005 no virus found
BitDefender 7.0 04.29.2005 Backdoor.Badcodor.B
ClamAV devel-20050307 04.30.2005 Trojan.Bancodor-3
DrWeb 4.32b 04.30.2005 no virus found
eTrust-Iris 7.1.194.0 04.30.2005 no virus found
eTrust-Vet 11.7.0.0 04.29.2005 no virus found
Fortinet 2.51 04.30.2005 W32/Spider.E-tr
F-Prot 3.16b 04.28.2005 no virus found
Ikarus 2.32 04.29.2005 no virus found
Kaspersky 4.0.2.24 04.30.2005 no virus found
McAfee 4480 04.29.2005 no virus found
NOD32v2 1.1084 04.30.2005 no virus found
Norman 5.70.10 04.29.2005 Bancodor.B
Panda 8.02.00 04.30.2005 no virus found
Sybari 7.5.1314 04.30.2005 Backdoor.Bancodor.AI
Symantec 8.0 04.30.2005 no virus found
VBA32 3.10.3 04.29.2005 no virus found


keytick.zip VirusScan.Jotti Results

AntiVir Found Worm/Bancodor.U.3
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found Backdoor.Badcodor.B
ClamAV Found Trojan.Bancodor-3
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found W32/Spider.E-tr
Kaspersky Anti-Virus Found not-a-virus:Tool.Win32.Reboot
mks_vir Found nothing
NOD32 Found nothing
Norman Virus Control Found Bancodor.B
VBA32 Found nothing


Vol20No06.zip VirusTotal Results

Antivirus Version Update Result
AntiVir 6.30.0.7 04.29.2005 no virus found
AVG 718 04.29.2005 no virus found
BitDefender 7.0 04.29.2005 Backdoor.Badcodor.B
ClamAV devel-20050307 04.30.2005 Trojan.Bancodor-3
DrWeb 4.32b 04.30.2005 no virus found
eTrust-Iris 7.1.194.0 04.30.2005 no virus found
eTrust-Vet 11.7.0.0 04.29.2005 no virus found
Fortinet 2.51 04.30.2005 W32/Spider.E-tr
F-Prot 3.16b 04.28.2005 no virus found
Ikarus 2.32 04.29.2005 no virus found
Kaspersky 4.0.2.24 04.30.2005 no virus found
McAfee 4480 04.29.2005 no virus found
NOD32v2 1.1084 04.30.2005 no virus found
Norman 5.70.10 04.29.2005 Bancodor.B
Panda 8.02.00 04.30.2005 no virus found
Sybari 7.5.1314 05.01.2005 Bancodor.
Symantec 8.0 04.30.2005 no virus found
VBA32 3.10.3 04.29.2005 no virus found


Vol20No06.zip VirusScan.Jotti Results

AntiVir Found Worm/Bancodor.U.3
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found Backdoor.Badcodor.B
ClamAV Found Trojan.Bancodor-3
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found W32/Spider.E-tr
Kaspersky Anti-Virus Found not-a-virus:Tool.Win32.Reboot
mks_vir Found nothing
NOD32 Found nothing
Norman Virus Control Found Bancodor.B
VBA32 Found nothing
Click to expand...


Here is my after action report. My findings are similar to BillR's.

I downloaded the entire directory of PCMag stuff using Filezilla. It went
real fast with no problems EXCEPT for all the trojans that were stopped by
Norton AV. I was hit 41 times by 18 different nasties! Here is the score
card from the log file:

TransScout X10
WinCrash Trojan horse X5
Backdoor/SubSeven Trojan horse X4
DeepThroat Trojan horse X3
SubSeven 2.1/2.2 Trojan horse X2
Striker Trojan horse X2
Bugs Trojan horse X2
Ripper Trojan horse X2
ShockRave Trojan horse X2
Spy Sender Trojan horse
Shiva Burka Trojan horse
FTP99CMP Trojan horse
Ultor's Trojan horse
Extreme Trojan horse
RASmin Trojan horse
Bla Trojan horse
Filenail Trojan horse
Phinneas Phucker Trojan horse

My opinion of this FTP server is that it may be an abandoned mirror (notice
there is nothing for 2004 or 2005) and now, through design or neglect,
operates as an attractive nuisance for the spread of these threats.

I scanned the downloaded files again afterward and found 4 instances of
KeyTick, whatever that is. Of course, as buggy as this server is, something
new and unknown could have gotten through, so will continue to monitor
closely. If you are downloading from this mirror or are planning to, use
extreme caution!

Haven't even begun to go through the stuff I downloaded. The worm/trojan
attack was quite fascinating.

Peacerose
 
An interesting site. A cursory scan of four folders (2000 - 2003)
found two _potential_ problems:
Click to expand...
[...]
I downloaded the entire directory of PCMag stuff using Filezilla. It went
real fast with no problems EXCEPT for all the trojans that were stopped by
Norton AV. I was hit 41 times by 18 different nasties! [...]
I scanned the downloaded files again afterward and found 4 instances of
KeyTick, whatever that is. Of course, as buggy as this server is, something
new and unknown could have gotten through, so will continue to monitor
closely. If you are downloading from this mirror or are planning to, use
extreme caution!
Click to expand...

Your posts made me curious. So I fetched some files from the mirror and
cross checked them with my old archive of PCMag utilities. The files on
the mirror are sometimes considerably larger than my old copies. It seems,
there are lots of *changed* (possibly infected) files on this mirror.

Because of the virus tests already done I didn't dig any deeper and sent
the newly loaded files to nirvana.

Be cautious, everybody!
BeAr
 
Your posts made me curious. So I fetched some files from the mirror and
cross checked them with my old archive of PCMag utilities. The files on
the mirror are sometimes considerably larger than my old copies. It seems,
there are lots of *changed* (possibly infected) files on this mirror.

Because of the virus tests already done I didn't dig any deeper and sent
the newly loaded files to nirvana.
Click to expand...

The site is a proverbial Trojan Horse! (Pun Intended)

Posted by a prankster from some Florida University.
 
An interesting site. A cursory scan of four folders
(2000 - 2003) found two _potential_ problems:
Click to expand...
[...]
I downloaded the entire directory of PCMag stuff using
Filezilla. It went real fast with no problems EXCEPT for
all the trojans that were stopped by Norton AV. I was hit
41 times by 18 different nasties! [...]
I scanned the downloaded files again afterward and found 4
instances of KeyTick, whatever that is. Of course, as
buggy as this server is, something new and unknown could
have gotten through, so will continue to monitor closely.
If you are downloading from this mirror or are planning
to, use extreme caution!
Click to expand...

Your posts made me curious. So I fetched some files from
the mirror and cross checked them with my old archive of
PCMag utilities. The files on the mirror are sometimes
considerably larger than my old copies. It seems, there are
lots of *changed* (possibly infected) files on this mirror.

Because of the virus tests already done I didn't dig any
deeper and sent the newly loaded files to nirvana.

Be cautious, everybody!
BeAr
Click to expand...

Sample of one:
InCtrl5 .ZIP is exactly twice the size of the "original" d/l:
ftp shows 1535 KB vs. 784,087 bytes (close enough to be
"exact"). File inctrl5.txt on the ftp is doubled (2 copies of
same text).

Methinks the site does not pass the "smell" test.

J
 
Your posts made me curious. So I fetched some files from the mirror
and cross checked them with my old archive of PCMag utilities. The
files on the mirror are sometimes considerably larger than my old
copies. It seems, there are lots of *changed* (possibly infected)
files on this mirror.
Click to expand...

I scanned the couple I downloaded and they all checked out clean. But your
point is well taken.
 
InCtrl5 .ZIP is exactly twice the size of the "original" d/l:
ftp shows 1535 KB vs. 784,087 bytes (close enough to be
"exact"). File inctrl5.txt on the ftp is doubled (2 copies of
same text).
Click to expand...

Not only text documents are affected. The same goes for some *.dll files
and executables... :-(

BeAr
 
Not only text documents are affected. The same goes for
some *.dll files and executables... :-(

BeAr
Click to expand...

Well, intention or ignorance, today was the last time I went to
that site.

Thanks for checking some more.

J
 
Back
Top