Music files changing to zip or exe: some info
 

Recently, some users have found that their music files have suddenly changed to .zip or .exe format & therefore are unplayable. This is caused by the user downloading an infected file.

Everyone MUST be aware of how many infected files are being shared on the network these days & be extra careful about what they download. Keep your AV program updated & scan every file that you've downloaded, before you open it.

Check your search results before you download. Look at the icons that show beside a file...are they music icons? Check the file size. File size will vary according to the song's bitrate, the higher the bitrate, the larger the file. Files less than 1000 KB in size are bound to be suspicious. See an example of real file sizes & music icons here (icons that you see are determined by your default music player).
http://www.gnutellaforums.com/attach...p3-results.jpgAttachment 3929

http://www.gnutellaforums.com/../att...p3-results.jpg


People are being infected because they're downloading files which show up in a music search...but the files are not music files. They have the programs icon, the file type is exe (DANGER SIGN:eek:) & files are way too small to be a valid music file. These files are usually 408.0 KB in size & are infected with this worm: Worm/Fontra.C - Full description
You might also see files of 228.0 KB, these are infected with the trojan TR/Drop.VB.ME.1 or TR/Drop.VB.ME.20
Do not download these files.
http://www.gnutellaforums.com/attach...lts-beware.jpghttp://www.gnutellaforums.com/../att...lts-beware.jpgAttachment 3928

AVG Anti-Virus Free Edition will find this worm. As the name suggests, AVG Free is free to download & is a reliable antivirus program. Download from the link below. Make sure that you update AVG before you scan your computer.
AVG Anti-Virus Free Edition

Avira AntiVir PersonalEdition Classic will also find the worm. Antivir will detect the worm during download & by default will deny access to the file, even if the download is completed as long as the AntiVir Guard is activated (ie when you see an open umbrella icon in the system tray). Download the free edition from the link below. Make sure that you update AntiVir before you scan your computer.
Avira AntiVir PersonalEdition Classic - MORE THAN SECURITY

There are probably other AV programs which will detect this worm, users of other AVs might like to add more info.


Once you've downloaded a file, before you open it, hover your mouse over the completed download, in the download pane below the search results. If you see .mp3.exe, the file is NOT a music file & is dangerous.
Do not open the file, delete it from your computer.
http://www.gnutellaforums.com/attach...e-download.jpgAttachment 3931
http://www.gnutellaforums.com/../att...e-download.jpg

People have also been infected through downloading files which have "BitDownloader" or "Bitdownload" in the title. These show up often as being 220.5 KB in size & contain Trojan.Obfuscated.en. See the link below for an example.
Problem with downloaded files

If you see "file name Bitdownload/er" in your search results...these are dangerous files & will infect your computer.
Do not download these files.
http://www.gnutellaforums.com/attach...er-results.jpgAttachment 3930
http://www.gnutellaforums.com/../att...er-results.jpg
http://www.gnutellaforums.com/attach...downloader.jpg
The real BitDownload is a BitTorrent client & has been known to install spyware, so it would be wise to stay away from that as well;)
Yahoo! Answers - What is exactly the bitdownload?
Removing BitDownload from my computer - SWI Forums


For more info about viruses on the network, read the thread below.
WARNING: Viruses on network you should be aware of!

For links to free security programs, click the blue link here

For further specialised help with virus/malware removal, please visit one of the sites below.
Spyware Warrior :: Index

CastleCops® » Security Forums

SpywareInfo Forum FAQ - SWI Forums

thanks birdy for this, this is my problem as well. i appreciate this.

Download AVG free, update it & then scan your computer. There's more info & links for download in the post just above yours;)

Thanks alot for this, mate. I worried when I found out all my downloaded files had been turned to zips, and I was completely unsure of how to fix it.

So after I download this AV and delete any necessary items limewire should run properly and stop changing music files to exe files or is it just a lost cause and I can never use limewire again?

LimeWire isn't changing anything to anything...you have a worm. LimeWire is just the app that was used to download an infected file;)

Scan with AVG & see what it finds. When your computer is clean, make sure to be careful when downloading. Check file sizes, stay away from zip, rar & exe files. Keep your AV updated & scan every file that you download, before you open it:)

so i just download AVG free and then the music files i download wont change to .zip files anymore?
is there a way to change my files from .zip back to normal mp3s?

how do you get the file that changed to zip back to an mp3 file everyone has been saying that the original song half to be in your computer and can been un compressed how do you do this? how do you change a zip file back to an mp3 file my memory hasnt been changed so the files are in my computer if they were deleted my memory wouldve sky rocketed back up does anyone know how to fix this i would appreciate anyones help thank you very much to anyone who helps.........

More re: lowadeck and the file name extension change problem
 

First, lowadeck, I apologise for qouting here your Private Message to me... This is something I normally never do without first asking permission... But, I'm sure you won't be too worried about it, right ???!!!

It is much better for you to have access to as many other people as possible to solve your problem !

Please give us more basic info about your computer...
Operating System
LimeWire Version
Internet Security type programs...
etc., etc.

My first question for you is simple... Are you SURE that the files have actually been 'compressed'... Are the files smaller in size than the originals that you downloaded... Or, more probable, are the files really the same original size and have simply had the file name extension changed from (for example) .mp3 to .zip ???
Are the file names all .zip or are there any that have been changed to .rar or .sit ???

Main thing for now ist that you should be VERY careful... Don't delete anything !
Be patient... HONEST, it pays in the end !

Hang in there.... Others will also be answering you, OK ?

C U
'urs'

A quick follow-up...
 

Please try the following...
(I do NOT know what anti-virus and/or firewall stuff you are running so the next bit may not work, depending on how your current protection software works... But, I do know that what I am about to suggest to you works very well happily with Avast... Avast is, in my opinion, the best Internet Security gear available today...)

Right, all that said...

Do a search for a program called

Prevx 2.0

I mean do a search on Google or whatever... Do NOT try to download a p2p based (LimeWire or any other) 'offering' of this program !!! ALL versions being 'shared' are with Trojan launchers... Don't believe me ? Try them, ha ha ha ha ha !

There is a full function trial version available for 30 days use.
It's also really cheap to buy a 1 year license !

Download it and SAVE it to My Documents or something... NOT to your Desktop!
Do NOT select Open after the Download completes... SAVE it !
Install it... Be sure to have your internet connection enabled during all of the install process.

Be patient because the first-time install can take quite a long time...

Run the various scans available...

Hope.


Prevx is the most effective 'cleaner' I have ever used... It fixes all the stuff that Norton and Avast and Kaspersky and others do not get or cannot access and repair and/or delete.

Last, for anyone reading the above posts... Screw AVG... It's junk. :rolleyes_2:

AVG was the only known AV to pick this virus up and get rid of it...
None of the other AV's did Ursula...That's why AVG is suggested...

Once the scan is done and the virus has been cleaned up AVG can be uninstalled and the user can go back to their preferred AV...

Well there, Dubya-Dubya...

Please try Prevx 2.0 !
Magic app.

And, here is a starter link for help in renaming file extensions...
I am not saying this is the best site or solution, but it is something that will work for those who have suffered the change of extension name from .mp3 to .zip -

Changing a file extension.


The other basic method is In Windows Explorer go to Tools/FolderOptions. Click on the View tab and if the option "Hide Extensions for Known File Types" is active, de-select it. Then proceed to rename the file, using the End key to go to the end of the filename and change the extension to "mp3."

ok my son not knowing what he was downloading WE assume he down loaded a corrrupted file through games on LW, for when we are doing something a pop up page comes of nothing we are doing, below is two of the sites:

http://c5.zedo.com/jsx/c5/ff2.html?n...16;w=720;h=300

Tests and Quizzes - Tickle Personality Tests

can you help me?

okay, when i download my music it IS mp3 format & it does play normally.
however, when i shut my computer down & then restart it
& open up limewire - all my music is at the 408.0 size
& in my "shared" folder there is another folder titled "_".
in it is music i DIDNT download, & it's the .exe files of the music.
i have a feeling this folder is the cause of my music problem.


on top of that, i delete that folder but it doesn't help.
it always finds it's back!


im a little frusterated. please help!

I have a music file ending with "_mp3.zip". I installed it to my desktop. I can open it and play the music. I can't find the file on my computer to burn a disc of it, tho. How do I convert it to just an mp3 file to burn it on a disc? Anybody know, thanks.

i need help i dl a trojan horse and they are controlling my comp as we speak

NEVER dl exe or zip
they might be viruses
hunter do you have a antivirus
if so run it and follow directions

id turn off system restore
run scan in safe mode
return to desk to restart sys restore


sys restore-
right click MY COMPUTER
PROPERTIES
SYS restore tab
unclick check/ re check check

pink look on forum for where my library go/hidden downloads

Thanks for the really helpful tips. I've encountered this a few times myself and I can't seem to find a solution. I may have to change my anti-virus too.

Another related link http://www.gnutellaforums.com/downlo...-limewire.html. Vague memory is Startup Items is where a part of the issue is. It needs to be removed from there, initially disabled loading at system startup via system settings.