Virus attack on eMule from Korea?

by Robert Koehler on March 4, 2007

in IT Korea

If you use eMule, you’ll notice this notice if you use the popular DonkeyServer No. 1 server:

Important notice to korean users : This server (and others as well) suffers from a virus attack from Korea and will shutdown in few days.
Korean users seems to be very stupid people ?, sorry, but the whole network suffers from this.

Anyone know what this is about?

VN:F [1.8.1_1037]
Rating: 0 (from 0 votes)

{ 28 comments… read them below or add one }

1 jonnyh March 4, 2007 at 7:00 pm

I do know that for a long time a few years back, some U.S. govt. websites blocked all Korean access and even some E-mail because of of Korean hackers’ antics.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
2 Mark March 4, 2007 at 7:56 pm

I know Nigerians use K-Lo’s as drug mules to Australia, but this is the first I’ve heard of Koreans hacking eMules.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
3 seouldout March 4, 2007 at 8:24 pm

I hope it wasn’t due to my new user name, Switzerland_2_Korea_0_and_the_call_was_right.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
4 captbbq March 4, 2007 at 10:55 pm

Why yes, I do know a little about it.

They attack in most certainly coming through an eMule client known as “Pruna”. Since Soribada (a horribly designed network btw) was forced to go straight and charge for its music, some enterprising Koreans, did what Koreans are good at. They took the source code and

1. Translated it to Koream
2. Monkeyed it up to require you to enter your citizen registry number along with all your other private information (certainly not needed to log onto the edonkey network)
3. Add some annoying online shopping mall to it when you start it up.
4. Break the terms of the GNU Public License (GPL) by not distribuitng the source code along with their diminished version to the unsuspecting and ignorrant Korean end users.

Oh the Irony of the GPL programmers who desinged a client to illegaly distribute copyrighted material, having thelr copyright tossed to the way-side and their program (eMule) defiled by the “Pruna” programmers. Kind of poetic when you think about it.

Basically most users for it don’t know what eDonkey is, or eMule for that matter. And the version they use by default logs onto “Donkey Server 1″.

Lets hope the users of pruna aren’t bright enough to figure out the little button on the botton right switches which server they are on, (Korean software mentality never empowers the end-user like western software does for some reason) else you will have this virus spreading to the rest of the eDonkey Servers.

But there-in lies your Answer -> Pruna http://search.naver.com/search.....sm=top_sug

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
5 captbbq March 4, 2007 at 11:05 pm

By the way, last summer Pruna started blocking any searches for copywrited material, causeing me no end of trouble getting my copy of Borat. I don’t know if this was implemented just for Pruna, of if it was for the Edonkey netwrok.

However, I suggest you use Frostwire (just another compile of Limewire, running on Gnutella network, that was recompiled and released seperately as a result of limewires project managers getting greedy, turning their product into a business, thus making themselves a target and getting sued.

Frustratingly reporters kept saying the “limewire” network would be shut down by this, but there is no such thing, and the network it is on, Gnutellanet (shared by Bearshare, Morpheus, and newer Shareeza versions) can’t be shut down as there is no central server.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
6 shakuhachi March 4, 2007 at 11:15 pm

captbbq, does the gnutella network even work properly? The last time I tried it more than 18 months ago, it was absolute crap, which is why I use emule, or occasionally, bit torrent.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
7 Wedge March 5, 2007 at 12:31 am

You guys need to figure out how to speak English. ;-)

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
8 Sonagi March 5, 2007 at 2:33 am

I admit I’m not the most tech-savvy person, and I had never heard of e-mule before. I clicked the link, read the front page, and what e-mule sounds like to me is a forum for swapping digitized content, including copyrighted material. Is that correct? Please respond in English :)

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
9 usinkorea March 5, 2007 at 5:02 am

Emule is one of the great invetions man has brought to creation.

It splits files into pieces which are then shared among users.

It wipes its arse with copyright law – and allows for the free distribution of information — whether ebooks, PC and Xbox and other games, movies, music, whatever is stored on a person’s computer they want to share.

This is one form of anarchy I am in favor of…

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
10 usinkorea March 5, 2007 at 5:06 am

a little more description:

You open emule and connect to a server and search for whatever you are looking for – by typing in key words.

The program then searches the users online at that given moment and prints up a list of files that might be what you are looking for —- then you click the ones you want and in a short amount of time you begin downloading it from different users (different pieces) and you automatically begin sharing what you are getting — as well as sharing pieces of whatever files you have stored in the folder(s) you allow emule to look in.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
11 Sonagi March 5, 2007 at 5:49 am

Thanks, UsinKorea. Your explanation is clear.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
12 bulgasari March 5, 2007 at 6:07 am

I’m quite certain emule does not block searches for copyrighted material. It must be pruna’s doing.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
13 gbnhj March 5, 2007 at 6:55 am

Someone told me that torrents are still cruising along, with dl’s in the hundreds/sec for popular stuff. Remember: don’t steal copyrighted material.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
14 chiamattt March 5, 2007 at 7:53 am

Come on guys, torrents are where the p2p world is now. Programs like pruna/emule are essentially useless and very dangerous these days. Emule went straight downhill when razorback went down. I am shocked that people still use Kazaa! Download utorrent and search for stuff on mininova, torrentspy, isohunt, or become a member of a site like oink or biteme.

No one can argue that the daily show and colbert report in 6 minutes isn’t fantastic. :)

Apparently 60% of the nets bandwidth is torrent related.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
15 madne0 March 5, 2007 at 8:16 am

chiamattt: Only problem with torrents is that it’s geared towards the most popular/newest stuff. If you want to find that 1987 album by the Swiss thrash metal band Coroner, good luck. Much better luck with DC++ or eMule. Or, better yet, IRC.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
16 seouldout March 5, 2007 at 9:39 am

Well, didn’t need much luck for Coroner, but thanks for your wishes. A quick search of the big 3 public trackers shows that Pirate Bay has “R.I.P.”, Mininova has the “the ultimate discography”, and Isohunt has quite a bit.

As chiamatt states the private trackers, especially the specialty ones such as oink, are particularly good.

Do agree with you that IRC is the best source.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
17 Sonagi March 5, 2007 at 9:50 am

My head is spinning.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
18 EFL Geek March 5, 2007 at 10:00 am

Chiamatt is essentially correct but for rare files emule kicks ass over torrents.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
19 usinkorea March 5, 2007 at 10:24 am

Sonagi,

I’m not a computer wiz or remotely close to it – and I could be very wrong on how this all works – but with that disclaimer—

All of these are programs (except IRC I think) are programs that flip files into parts in a folder(s) you select for the program.

These files are searchable via file name and such.

So, for example, if I want a movie or song or an archived file of all the music by one band or an ebook or a video game or images or whatever…

I type in a search – it shoots back possible matches (for example, if I look for “The Big Lebowski” movie – there might be several file versions of the same exact movie) -

then I click on the files I want to download —

and the program begins downloading parts of it from different people – a chunk here – a chunk there.

As I download a part – I automatically also share it if someone wants it from me…

Emule and edonkey are older and slower – hence the names.

Torrent allows for faster downloads (don’t know the tech info behind that).

IRC is different. The way it looked to me – imagie the skyscraper Technomart in Seoul – and each room in the whole building is a chat room where people from all over the earth can mix and mingle – going from chat room to chat room.

But, IRC also allows more direct connections to someone else’s computer.

If I understand it — when you search and click a file to download via IRC – you are downloading the whole thing from one server or one other person’s computer….

It can be very fast in transferring the files.

Also, you can go to webpages that provide a seach function for Torrents and when you click on the links, it launches the program and begins to download the file.

I haven’t been using any of these programs for awhile, because while I am student-teaching and paying for grad school (yet again), I’m stuck with dial up….

which sucks out the …………. —-

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
20 usinkorea March 5, 2007 at 10:25 am

“flip files” should be “split files”

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
21 user-81 March 5, 2007 at 10:39 am

井上馨

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
22 captbbq March 5, 2007 at 10:55 am

shakuhachi,

Yes it does, which client did you use? If you use Gnutellanet I suggest you stay away form limewire now, they release substandard version to get you to upgrade to “pro”. And the developer of bearshare is a megalomaniac.

The problem is that they are loath to make the additions to the network they need to make it appropriate for the asian market. For Example they block search queries of 2 (or 3) characters because a search of three characters in engish (like “in”) will return every file with the word “in” and overload the network. But if you search in Korean and you just want songs by Hyori (효리), thats pretty distinct but will still get blocked.

Enough of that though…

chiamatt,

As far as torrents go, modern P2P networks like eMule and Gnutellanet work the same way as torrents but better, in that you get the same function of users downloading already downloded chunks form each other, increasing banwidth for every user downloading, but also it offers an integrated non targetable search network, something Piratbay.org and others like it can’t offer. As Torrent search engines operate through a website, it cannot gaurantee that it lists all torrents availabe (as they are listed independently) and furthermore it is very suseptible to a government shutting it down, as history demonstrates.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
23 a-letheia March 5, 2007 at 11:16 am

Why don’t Koreans use torrent clients? Hardly any of them have even heard about it. P2P is old and much easier to be shut down by the music industry. Oh, but I miss my Kazaa…

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
24 captbbq March 5, 2007 at 11:17 am

usinkorea #19 is right for the most part and chiamatt is too in #14

The reason why Torrent downloads faster is that it is more popular (as chiamatt says its “where it is at”). In these systems more people mean more bandwidth.

This doesn’t mean that the network is optimal. Far from it. If just as many people used eMule or Gnutellanet, it would be just as fast, and you would get your historical content the way Madne0 talks about in #15. Being the most popular method at the moment doesn’t mean it is technically the best. People tend to stay with what works, regardless if something better is out there.

In the Donkey or Gnutella networks, the p2p network encompases all files of all users, while with torrents, the p2p environment only exsists around the file being downloaded. Everything else is just a link on a website, thus has serious issues as it is far from optimal, not as easily updatable with new files, requires these new files to specially formated as .tor files, and is vulnerable to legal attack.

…but is resillient against virus attack like the one on eMule (yay, back on topic! :-)

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
25 captbbq March 5, 2007 at 11:24 am

a-letheia, there are several kinds of p2p networks, torrent websites are as easy to shut down as napster was. Kazaa(fasttrack network) and eMule(the old version, using the donkey2000 network) are harder to shut down as they distribute their assets amoung many countries. but as you can see this still vulnerable. Thats why they made a new independent network for eMule, that is more similar to Gnutellanet

Gnutellanet is hardest still, and freenet is damn near impossible. And these network have been constantly updated, and revised. They aren’t “old technology”… and, they’ve incorporated the innovations of torrents…

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
26 seouldout March 5, 2007 at 11:45 am

…it is very susceptible to a government shutting it down, as history demonstrates.

RIP suprnova, elitetorrents, et al.

cptbbq, informative write up about the current state of p2p. Two reasons I jumped to torrents several years back was packets-from-many, which p2p didn’t offer at the time, and ratios, which, when enforced, tend to police the grab and goers.

Sonagi, to unspin your head install utorrent & peerguardian. Dead simple to use and well supported. Or if your ISP offers access to newsgroup servers like the undernet use your IRC client.

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
27 usinkorea March 5, 2007 at 12:35 pm

I have a feeling Sonagi won’t go this route if she understands what is going on.

I am basing this on Sonagi pulling down images of the recent anti-semitic comic book due to checking out specific copyright laws.

Everything we are talking about laughs in the face of copyright laws with utter glee….

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)
28 madne0 March 6, 2007 at 2:56 am

seouldout: I searched Pirate Bay and torrentspy and none had more then 2-3 seeds. Not very encouraging. But still, as far as metal goes, maybe Coroner wasn’t the best example. They’re underground, but not that underground. Try searching for some !T.O.O.H.! (Czech Death Metal band) or Himinbjørg (French Black Metal band). No chance ;)

UN:F [1.8.1_1037]
Rating: 0 (from 0 votes)

Previous post:

Next post: