Virus Goes After MP3 Files

KingFish

The Nopir-B worm is making the rounds and deleting music files.

The worm has been rated as "very high" for system risk, but low in terms of network and spread risk. Nopir-B spreads via P2P networks and deletes files with the extension .mp3 or .com. The virus does not always attack other system files ("It may modify registery value to prevent execution of Control Panel, tools that are related to registery, and Task Manager"), but the impact may be enough to prevent systems from rebooting (since the "ntdetect.com" file gets deleted in the worm's attack). According to AhnLab chief researcher Kang Sung-eun, "Nopir-B worm has yet to make its way to Korea. But computer users should keep tabs on it due to its disturbing damage."

This one will make conspiracy theorists go nutty. -KF

Source: GEEK.com

entropy

Haha, no kidding. It does seem conveniently useful, though (for the RIAA). Still, a virus that does that can be pretty potent.

GrayFox

Gah all my legaly backed up mp3's may be put at risk, Anyone know how it speads.

Garg

News wrote:

Nopir-B spreads via P2P networks...

Hopefully, that's the only way it's getting around. I haven't used P2P in awhile.

KingFish

Apparently it doesn't have a very intelligent engine to help it spread very well although if your computer does happen to get infected the probability that your mp3's will get sacked is quite high. The fact that it spreads via P2P networks (long a thorn in the RIAA's side) and targets mp3's (another thorn in the RIAA's side) is what drives the conspiracy theories at this time.

EyesOnly

how do you stop it. The article didn't say.

KingFish

It'll probably be taken care of with the next round of virii definitions if it hasn't already been done so.

EyesOnly

let's hope so. Sure wouldn't want a thing like that in any network.