File Sharing, otherwise known as Peer To Peer. (P2P)

[tashi]

While P2P programs allow the creation of a network and enable you to connect with other users to upload or download material in a fast efficient manner, (often games, music, and films), using P2P is the cause of many infections.

File Sharing Programs are not to be confused with the actual files one uses a P2P program to upload/download.

Update:
Please see Post #4 below.
http://forums.spybot.info/showpost.php?p=218503&postcount=4


None of the files you download can be guaranteed to contain the content as described by their name.

Indeed many can and do contain viruses, trojans or spyware; especially as file downloads are typically from unknown sources.

Of course users should have an up to date anti virus program installed, but malware writers may use methods to circumvent security programs.

If you have downloaded cracks-warez-keygenerators, the odds are you already have an infected computer.
Even visiting such a site can give your computer multiple infections.

Your computer may then be exploited and act as a zombie or server of spam and malware to infect many others, often without your knowledge until your own system grinds to a halt.

Other people, using a peer-to-peer file sharing program, can access, retrieve and put files on your hard drive. If you insist on using P2P.


Set up the file-sharing software to limit others access to your private files.
Do not put personal files such as medical, banking, tax, correspondence, address books or other sensitive information in the same folder as files that are shared via your P2P software program.
Prevent the file-sharing program from automatically opening; especially if you have an always on connection which may allow others to copy your shared files at any time.

Most entertainment files infringe the copyright laws and if you share them, knowingly or unknowingly, you are putting yourself at risk of prosecution.

The Recording Industry Association Of America RIAA (http://www.riaa.com/default.asp) sues if copy-righted material is downloaded and shared with others on the Internet.

P2P
http://en.wikipedia.org/wiki/Peer-to-peer

[tashi]

Open source programs are distributed under a license that allows for repackaging and redistribution.

In a nutshell this means the program could be modified by unscrupulous parties to bundle malware and then passed off as the original application.

Download programs from the official web site of the program's developer.

Of interest:
Resources for open-source developers and a directory of in-development open-source software. (http://sourceforge.net/)

[tashi]

A list that is kept as up to date as possible: Clean/Infected P2P Programs (http://p2p.malwareremoval.com/)

Please note that we are by no means endorsing any product, nor the use of P2P apps in general -- they add an unsecure access route for malware, whatever the specific program. With the knowledge of which applications are inherently clean, however, one can make an educated decision concerning their use.

[tashi]

P2P programs

We have noticed that many people seeking help from us are coming with infections contracted from the use of P2P programs.

Because of this, we changed our malware forum's policy on the use of P2P file sharing programs.


If your helper detects the presence of such programs on your computer he/she will ask you to remove them. Help will be withdrawn should you not agree to their removal.



Please be aware that tools used during the cleanup will likely remove them anyway, if that is not acceptable to you please withdraw your request for assistance.



If we clean your computer of infection, and you return to us a short time later with an infection contracted by the use of P2P programs, volunteer analysts will refuse their help.


We do not ask you to do this without reason.

P2P programs form a direct conduit onto your computer, their security measures are easily circumvented, and Malware writers are increasingly exploiting them to spread their wares onto your computer. Further to that, if your P2P program is not configured correctly you may be sharing more files than you realise. There have been cases where people's Passwords, Address Books and other personal, private, and financial details have been exposed to the file sharing network by a badly configured program.

This article from InfoWorld illustrates the dangers of a poorly configured P2P program.
http://www.infoworld.com/article/07/09/06/...ID-theft_1.html (http://www.infoworld.com/article/07/09/06/Seattle-man-arrested-for-p-to-p-ID-theft_1.html)

When you use them you are downloading software from an unknown source directly onto your computer, bypassing your Firewall and Anti-Virus software. Many of these Downloads are targeted to carry infections.

Credit: GaryR, Elrond at MRU. Tweaked for this forum.

http://forums.spybot.info/showpost.php?p=25290&postcount=4