Virus getting over NOD and renaming my music with porn names when WinAmp starts

[WerBackIII]

This is everytime I start WinAmp, renaming all the *.avi or *.mp3 files in the folder the played file is. NOD and AVG pass it, please if someone knows how to find and remove this virus, help.

EDIT: Replaced the old ScrSht-s with new, censored ones.


EDIT 2: Pleace help, because I'm having troubles with my last.fm

 

[Tank_Guy#3]

This is everytime I start WinAmp, renaming all the *.avi or *.mp3 files in the folder the played file is. NOD and AVG pass it, please if someone knows how to find and remove this virus, help.

EDIT: Replaced the old ScrSht-s with new, censored ones.


EDIT 2: Pleace help, because I'm having troubles with my last.fm

Hmmm, NOD is a very good AV program. Unusual that it would pass a threat into your PC. Is all your AV software up to date (definition wise)?

If you're running Windows XP, do you have all Priority updates installed (Automatic Updates)?

You may also consider downloading and scanning with a different AV program (Adaware 2007 perhaps).

---------------------------------------

EDIT: You may also consider trying Windows Defender. Make sure you update the virus definition files before you scan.

IT Security Quote: Out of date AV definitions are only slightly better than no AV at all.

 

[Genocidicbunny]

Try a scan with avast!. Also, have you done all the recent virus definition updates for NOD and AVG?

 

[WerBackIII]

I had the updates, but it seems that when my laptop hibernates, both AVG and NOD get disabled. The only program that remains is Spybot SD, which I fairly dislike (it's being the reason my wi-fi net to disconnect suprisingly).

I've firstly done a scan with AVG and found the threat, but I wasn't available to heal it. Luckily, NOD did it.

The threatname that AVG showed me was windows_autorenamer.dds. Does anyone know something about this?

 

[damunzy]

I had the updates, but it seems that when my laptop hibernates, both AVG and NOD get disabled. The only program that remains is Spybot SD, which I fairly dislike (it's being the reason my wi-fi net to disconnect suprisingly).

I've firstly done a scan with AVG and found the threat, but I wasn't available to heal it. Luckily, NOD did it.

The threatname that AVG showed me was windows_autorenamer.dds. Does anyone know something about this?

To bad I didn't get a chance to look at your play list before you fixed the problem.

Have you downloaded a program from a friend lately? One that possibly knows how to program or knows programmers. I am thinking that maybe you have and it is just a prank file and not a real virus. Anyone snickering at your expense lately?

Next time you have a problem like that, try turning on the heuristic to high and scanning ALL files. That might find a custom/home brew "virus".

 

[GoodGame]

I really like Kapersky Internet suite, and its AV pretty much sets the standard and is licensed by other security suites. http://usa.kaspersky.com/downloads/...MP=KNC-DJ2899729106&HBX_PK=Kapersky&HBX_OU=50

That is a funny virus however, but I couldn't find one by that name anywhere.
Apparently autorenamers are pretty common utilities for media files, so perhaps some malware is actually hijacking a benign utility?

 

[Mise]

I'm sorry, but that's absolutely hilarious!

 

[El Koeno]

As viruses go, this is a pretty funny one indeed!

Hope I don't get it though.

 

[Mise]

I already have it! If anyone questions the contents of certain folders, I'm linking them here.

 

[Pentium]

Me wants it too

 

[GenMarshall]

I'm sorry, but that's absolutely hilarious!

"I don't care who you are, that's funny right there!" - Larry the Cable Guy

 

[lutzj]

Are we sure this "virus" isn't one of those dreaded "kid_brother.exe" or "roommate.dds" files?