View Single Post
  #9 (permalink)  
Old June 2nd, 2007
birdy's Avatar
birdy birdy is offline
Airhead
 
Join Date: October 18th, 2004
Location: Perth, Australia
Posts: 889
birdy has a distinguished reputationbirdy has a distinguished reputation
Default

Files are 408.0 KB & are .mp3.exe (with the exe icon). AntiVir found WORM/Fontra.C during download, which is the same as the Delf.ATB worm that Aaron suggested months ago.
Worm/Fontra.C - Full description

One person also downloaded a Bitdownloader file & got hit with this worm.
http://www.gnutellaforums.com/downlo...ded-files.html
These ones show up in my search as "song title Bitdownloader", again with the exe icon. The ones I found were 220.5 KB. Antivir ignored them, AVG Antispyware found Trojan.Obfuscated.en.


There are some other really nasty little .mp3.exes of 228.0 KB & these show up with TR/Drop.VB.ME.1, TR/Drop.VB.ME.20. Can't find too much info about these but they seem to be much harder to get rid of than the worm.

Last edited by birdy; June 2nd, 2007 at 07:13 PM.
Reply With Quote