AOA Forums AOA Forums AOA Forums Folding For Team 45 AOA Files Home Front Page Become an AOA Subscriber! UserCP Calendar Memberlist FAQ Search Forum Home


Go Back   AOA Forums > Software > OS, Software, Firmware, and BIOS


Reply
 
LinkBack Thread Tools Rate Thread
  #1 (permalink)  
Old 23rd June, 2002, 11:34 PM
Samuknow's Avatar
Member
 
Join Date: September 2001
Location: Indianapolis, Indiana
Posts: 8,941
Send a message via MSN to Samuknow

MP3 tagged to mp3.vbs

I just reformatted a friends computer. He was having a ton of problems and rather than trying to fix them all I backed up files on my network and wiped the OS.

He had some music files (mp3) and there were copies that had the extension mp3.vbn. The mp3 properties have system file checked and locked so I cannot uncheck it. The bizzare thing is that I deleted all of the VBN files and copied all of the MP3s back to his rig. After rebooting the vbn files showed up again and the mp3s were checked as hidden files. I don't get it. I have tried everything I can think of. Any ideas here? No matter what I do the files come back and the mp3s change back to hidden. AAAAHHHHH....
__________________
Quote:
Originally Posted by Daniel ~ View Post
It's OKAY WE accept you as you think you are here! ":O}
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 24th June, 2002, 01:26 AM
drow_elf's Avatar
Member
 
Join Date: April 2002
Location: New Mexico, USA
Posts: 721
Send a message via ICQ to drow_elf Send a message via AIM to drow_elf

whoa thats scarryy! could it be the player?
__________________
"Pointillists shouldn't use Scantrons" -me
AOA Team fah
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 24th June, 2002, 01:45 AM
Samuknow's Avatar
Member
 
Join Date: September 2001
Location: Indianapolis, Indiana
Posts: 8,941
Send a message via MSN to Samuknow

No, This was even b4 I installed winamp or media player. The files were created in Win2k. Just looking at the folder where the files are there is a duplicate file next to the mp3 that has vbn.

Ex AC/DC.mp3 AC/DC.mp3.vbn

If I delete all the files with the vbn ext they come back. Is what is really tripping me is the mp3 being system files and I can't change them...
__________________
Quote:
Originally Posted by Daniel ~ View Post
It's OKAY WE accept you as you think you are here! ":O}
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 24th June, 2002, 01:53 AM
Superman's Avatar
Systems Administrator
 
Join Date: September 2001
Location: WI
Posts: 4,406
Send a message via ICQ to Superman

Ick, AC/DC! Just kidding
__________________
"And, most of all, remember this descendant of David who beat the hell out of death."
-from the book "Six Hours One Friday" by Max Lucado

"You have to go outside the sequence of engines, into the world of men, to find the real originator of the rocket. Is it not equally reasonable to look outside nature for the real Originator of the natural order?
-C.S. Lewis


Director of JavaScript section of the Allied Sites Support Team, web designer and programmer for DaOCPlace, and co-web designer and programmer for AOA Files

Avatar by Epox Tech



<>< I Believe-Do You?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 24th June, 2002, 01:57 AM
Samuknow's Avatar
Member
 
Join Date: September 2001
Location: Indianapolis, Indiana
Posts: 8,941
Send a message via MSN to Samuknow

Not my music it was his.....
__________________
Quote:
Originally Posted by Daniel ~ View Post
It's OKAY WE accept you as you think you are here! ":O}
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #6 (permalink)  
Old 24th June, 2002, 06:38 AM
Banned
 
Join Date: September 2001
Posts: 5,957

sounds like the behavior of a resident virus OR a piece of audio software is reading the directory and creating this as reference files of some type...
__________________
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #7 (permalink)  
Old 24th June, 2002, 07:02 AM
robbie's Avatar
AOA Staff
 
Join Date: November 2001
Location: Out in the desert of Ca.
Posts: 12,548
Send a message via AIM to robbie Send a message via MSN to robbie Send a message via Yahoo to robbie Send a message via Skype™ to robbie

Quote:
Originally posted by Superman53142
Ick, AC/DC! Just kidding
AC/DC ROCKS bra!!!
Rob

Did I mention that I was born with a stiff upper lip?
__________________
Taking each day as it comes
Grow, learn and OVERCLOCK. Need help?? Ask me.
Your Mommy!! (Aug/02) Welcome to the fold.
Buy it, Sell it, or Trade it in the AoA classifieds!!
AOA Team fah
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #8 (permalink)  
Old 24th June, 2002, 07:42 AM
kendan's Avatar
Deactivated
 
Join Date: October 2001
Location: S.F.
Posts: 94
Send a message via AIM to kendan

Virus!!!!! that is what it sounds like. Go to sarc.com and run there online virus scanner. Good luck and if you by chance had those files on your computer I would scan it too. If you need a free virus protection go to grisoft.com and download AVG. it is not the best but it is better than nothing and it has frequent updates. Good luck
__________________
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #9 (permalink)  
Old 24th June, 2002, 10:34 AM
Chief Systems Administrator
 
Join Date: September 2001
Location: Europe
Posts: 13,075

Sounds suspiciously like a modified (or derivative) version of the "ILoveYou" virus.

Anything that hides existing files, and creates renamed versions smells very very strongly of a virus.
__________________
Any views, thoughts and opinions are entirely my own. They don't necessarily represent those of my employer (BlackBerry).
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #10 (permalink)  
Old 24th June, 2002, 01:43 PM
Samuknow's Avatar
Member
 
Join Date: September 2001
Location: Indianapolis, Indiana
Posts: 8,941
Send a message via MSN to Samuknow

Good call guys. I did have this backed up on my computer. Just had the folder sitting there. I ran a virus scan and it found the love letter virus. I blew all the files away and am running a major sweep of all my systems.


Thanks
__________________
Quote:
Originally Posted by Daniel ~ View Post
It's OKAY WE accept you as you think you are here! ":O}
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #11 (permalink)  
Old 24th June, 2002, 10:36 PM
drow_elf's Avatar
Member
 
Join Date: April 2002
Location: New Mexico, USA
Posts: 721
Send a message via ICQ to drow_elf Send a message via AIM to drow_elf

hmm i was just thinking of how effective such a virus would be against people using the default windows settings- no extensions, no hidden/system files- you would never notice it (esp if the VBS ran the file it replaced!)
i guess the only weakness would be if you used the open dialog
__________________
"Pointillists shouldn't use Scantrons" -me
AOA Team fah
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #12 (permalink)  
Old 25th June, 2002, 12:08 AM
Samuknow's Avatar
Member
 
Join Date: September 2001
Location: Indianapolis, Indiana
Posts: 8,941
Send a message via MSN to Samuknow

True. The hidden files played fine on his machine.

The name of the virus was " love letter"

All the systems are clean. After deleting the files It found nothing....

Thanks
__________________
Quote:
Originally Posted by Daniel ~ View Post
It's OKAY WE accept you as you think you are here! ":O}
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Apple's lawyers have got you tagged danrok Data Security 40 7th June, 2007 11:59 PM


All times are GMT +1. The time now is 02:09 PM.


Copyright ©2001 - 2010, AOA Forums
Don't Click Here Don't Click Here Either

Search Engine Friendly URLs by vBSEO 3.3.0