MP3 Virus?

S

smokey

Honorary Master
Joined
Dec 12, 2007
Messages
13,465
Reaction score
1,393
Location
/\_____/\
Well heres the deal... I play certain MP3's and after about 20-40 seconds, the MP3 stops and launches IE and trys to go to a site called hasvideo.net. I ran KAspersky on the folder containg the MP3s but to no avail. IT doesnt happen with any other MP3s except that certain folder.

Sooooooo... Whats up with this? Any help would be mucho appreciated.
 
it cannot be the mp3 file itself, must be the actual player software or a plug-in thereof . . .

the only url information in an mp3 file is stored in the id3 tag info.
 
larrychang said:
google is your friend?
Click to expand...

Well in this case not - my Google-fu is not bad but it has left me powerless these last few days in regards to this problem.

@Fubar - I know its wierd - It only happens with certain directories of files and it only started about a week ago. Since Ive been busy reinstalling al the PCs at home, I havent had much time to listen to music except off my phone - when it cropped up last night, I was really ticked off.

EDIT: I know that an MP3 can't have a virus in it - it could be one of the hidden files or some such in one of the directories.
 
'google hasvideo.net + virus' and 'hasvideo.net + mp3' .... it brings back results, you go read them though.
 
The malware directs users to a webpage that displays a mock codec download which of course is stem of the virus, the virus (actually a trojan horse) looks for MP3 files on the infected computer, converts them to WMA and wraps them in an ASF container which has the malicious code in it to initiate further spread. The infected user has no idea that any of this is happening behind the scenes as the files retain the ".mp3" extension.
 
neobyte said:
The malware directs users to a webpage that displays a mock codec download which of course is stem of the virus, the virus (actually a trojan horse) looks for MP3 files on the infected computer, converts them to WMA and wraps them in an ASF container which has the malicious code in it to initiate further spread. The infected user has no idea that any of this is happening behind the scenes as the files retain the ".mp3" extension.
Click to expand...

Wow! Thanks for the explanation - but what do I do about it? As I said, I already tried scanning the folders with a compeltely uptodate version of Kaspersky and nothing.

@M_H - dude, dont you think I tried those search strings? IT just shunts out a lot of garbage in other languages/programming only the following string - "hasvideo.net" +virus +mp3 - yields a decent result (it give me two sites, mybb and some swedish one) otherwise bugger all.
 
smokey said:
Well heres the deal... I play certain MP3's and after about 20-40 seconds, the MP3 stops and launches IE and trys to go to a site called hasvideo.net. I ran KAspersky on the folder containg the MP3s but to no avail. IT doesnt happen with any other MP3s except that certain folder.

Sooooooo... Whats up with this? Any help would be mucho appreciated.
Click to expand...

Where did you get those mp3's ?
What about deleting the folder and re-copying those mp3 tracks from a reliable source?

Have you checked the id3 tag info ?
Maybe mp3 by mp3 you can delete the hasvideo.net url in the id3 tag info ?
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X