Fake MP3 Trojan Detected On 27% Of PCs

Discussion in 'malware problems & news' started by MrBrian, May 7, 2008.

Thread Status:
Not open for further replies.
  1. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    Full story
     
  2. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    Full story
     
  3. harrywaldron

    harrywaldron Registered Member

    Joined:
    May 8, 2008
    Posts:
    1
    Location:
    Roanoke, Virginia
    Hi - More links are noted below:

    http://msmvps.com/emoticons/emotion-29.gif While this is more applicable to home users, I haven't seen a threat rated as MEDIUM for a while. This one is apparently circulating extensively. It appears to affect folks participating on P2P networks, which are always dangers with respect to malware and copyright concerns.

    All users need avoid the site: fastmp3player (dot ) com

    Avert Medium Threat Advisory -- Fake MP3 malware P2P attacks
    http://www.avertlabs.com/research/blog/index.php/2008/05/06/fake-mp3s-running-rampant/
    http://www.avertlabs.com/research/blog/index.php/2008/05/07/yet-even-more-fake-media-files/
    http://blastmagazine.com/2008/05/mcafee-identifies-downloader-uah-first-medium-risk-malware-in-three-years/
    http://vil.nai.com/vil/content/v_144503.htm

    QUOTE: Detection of a trojan named Downloader-UA.h was added to the McAfee DAT files several days ago. Since that time more than 360,000 McAfee VirusScan Online users have reported detections, a whopping 32% of those reporting in the past 24 hours alone. Now Downloader-UA.h is not your everyday trojan, this detection covers fake music and video files associated with *** MALIOUS URL REMOVED ***

    When a user attempts to load one of these MP3 and MPG files, they don’t get the music/video they were hoping for; instead they’re directed to download a file named PLAY_MP3.exe. In fact, the MP3/MPG file they downloaded was completely fake, playing no media clip what so ever.
     
Loading...
Thread Status:
Not open for further replies.