Gnutella Forums

Gnutella Forums (https://www.gnutellaforums.com/)
-   LimeWire+WireShare Tips and Tricks (https://www.gnutellaforums.com/limewire-wireshare-tips-tricks/)
-   -   Help! All my Files Have Been Turned Into ZIp Files!!! (https://www.gnutellaforums.com/limewire-wireshare-tips-tricks/70974-help-all-my-files-have-been-turned-into-zip-files.html)

dragonflybaby92 June 2nd, 2007 08:51 AM

Help! All my Files Have Been Turned Into ZIp Files!!!
 
Every file I have in my library audio, avi , ect. has been turned into a zip file that dosen't work please help me fix this !!!!

Peerless June 2nd, 2007 11:03 AM

try going into your downloads folder and manually changing the extension to the appropriate one...i.e. if its supposed to be a mpg, change it from .zip to .mp3...ignore the warning from windows when you do this, then verify the above method works by trying to play it..

the reason you think its a 'corrupted' zip file is that of course the file is NOT a .zip file, so it is listed as corrupted as of course it cannot be opened as a zip file because its not...

wondering why June 2nd, 2007 01:36 PM

Hey Peerless...This is a known virus that's on the network now and the only way to get rid of this baby is to use AVG...

dragonflybaby92
So if you aren't running that AV the best thing to do is disable the one you have and download AVG, scan your computer, get rid of the virus and then you can unistall AVG and make your normal AV active again...

AVG download.....AVG Free Advisor: AVG Anti-Virus Free

Peerless June 2nd, 2007 03:30 PM

IC...I suspected as much, having seen numerous posts on this subject, but I was not aware that manually changing the files back would be futile...I suspect from the tone of your post that said 'virus' is not a simple one time script that one can just clean up after...

considering my semi-retired status and the fact I certainly don't feel like doing the research necessary to answer the following, perhaps you can?

so what exact type of file is spreading this virus?

wondering why June 2nd, 2007 03:35 PM

Do you know that not a single poster has even suggested what exactly they have downloaded that gives them this virus...
Birdy has done some research and found that the file says something along the lines of mp3.exe...That's the best we can go by at the moment...

Also once AVG has cleaned this little baby up not a file is left, they lose their whole Library...
Sounds like RIAA to me...;)

Peerless June 2nd, 2007 03:47 PM

hmmm..well then, I suggest some experements need to be done...

what I would advise is that a person moves all mp3 files out of their downloads folder and then try the above...then run the AVG...I suspect that possibly the virus only targets the downloads folder and that moving files from there might just keep them from being deleted...

has there been any mention of said virus affecting one's entire computer?

wondering why June 2nd, 2007 03:54 PM

Oops I hit edit and not reply...sorry I will pull my reply out of your post...:swoon2:

wondering why June 2nd, 2007 03:56 PM

Good idea...
No-one has reported the virus going any further than their download folder, once this virus is cleaned up, they can re-download and all new files are fine...;)

birdy June 2nd, 2007 06:54 PM

Files are 408.0 KB & are .mp3.exe (with the exe icon). AntiVir found WORM/Fontra.C during download, which is the same as the Delf.ATB worm that Aaron suggested months ago.
Worm/Fontra.C - Full description

One person also downloaded a Bitdownloader file & got hit with this worm.
http://www.gnutellaforums.com/downlo...ded-files.html
These ones show up in my search as "song title Bitdownloader", again with the exe icon. The ones I found were 220.5 KB. Antivir ignored them, AVG Antispyware found Trojan.Obfuscated.en.


There are some other really nasty little .mp3.exes of 228.0 KB & these show up with TR/Drop.VB.ME.1, TR/Drop.VB.ME.20. Can't find too much info about these but they seem to be much harder to get rid of than the worm.

Peerless June 2nd, 2007 07:58 PM

hmmm....interested in writing a nice little sticky about this subject birdy?, you seem quite up on the subject!

*cough*cough*hack*hack* I guess I've missed out on this experience (as I'm sure others have for the same reason) because I know not to even think about downloading such obviously "wrong" files...I do have some dim memory about seeing something similar coming back as a search result, but that is possibly a false memory...reminds me of the infamous Wavelab5 crack (which was floating around when Wavelab4 had just been released:bangh:) that was floating around for a time....


All times are GMT -7. The time now is 02:15 PM.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.