A hypothetical question

selfrisinmojo

For research purposes only, let’s say someone was lured into the seamy world of “shared” music by a sight that offered very rare, “out of print only” music from the 60s and 70s. Let’s also say that someone relaxed their standards and took advantage of this offer and was promptly rewarded with a foul virus for their indiscretion. If this were to happen and the results led to the infection of every executable file on the computer, could the hypothetical mp3 files also be infected?

mommio

Speaking hypothetically, since this hasn't happened to me (too bad about your "friend") I would guess that the virus was attached to an mp3 file. I would run a good scan on every file, not just the .exe files.

thomnottom

As far as I know there is no way that an mp3 file can actually deploy a virus as it is not executable in any form. The only thing I could think of is if it contains some sort of exploit for your media player - but I am not aware of any tactics like that. Typically it means you downloaded an executable or script file that was named to look like an mp3 (by default Windows hides known extensions, so stevemillerband-stuckinthemiddle.mp3.vbs will look like stevemillerband-stuckinthemiddle.mp3 even though it was STEALER WHEEL YOU ASSHOLE!... whoops, got sidetracked).

Regardless of how it was deployed, the virus could infect anything depending on what it is. You could start with a free online scan. Then I recommend d/ling Avast! or AVG Free and schedule a boot-time scan as soon as one is installed (only install one).

Let me know how it goes and if you need any more help. Whatever you do, don't format or trash the hard drive because someone tells you files are unrecoverable!

selfrisinmojo

shabbily veiled ruse aside, the virus was only discovered as an afterthought when the feeding frenzy was finished.
Purely out of curiosity, an AVG scan was run and several trojan horses detected; attempts were then made to remove or quarantine these shifty bastards which resulted in immediate and irreversible infestation. This PC was only used for music download and all mp3s were salvaged; however, an unconditional format and reload seemed the safest way to bring it back to life.
rapidshare was used to download the full releases one at a time; not sure of the mechanics, but the viruses seemed to originate from places outside the source of the music.

elwoodicious

Terrible situation and I don't envy you. One thing that might help in the future would be using a virtual appliance to surf the less than savory parts of the Internet as it would help limit the scope of damage and allow you one click recovery if something went awry but you'd still want to quarantine and scan any files you'd plan on transferring off the virtual machine. Sun's VirtualBox is a solid piece of software and I use it for testing websites in IE (I'm an Ubuntu user) and it doesn't tax my laptop too hard.

Katrina

Your friend can do an online scan. I'd probably start with Kaspersky.
If it finds something, your friend can download a free trial and try to remove it; or post at a help site such as bleepingcomputer or tech support guy.

selfrisinmojo

thanks for the help.
my pc is back up and running; the mp3s from the offending site are on a jump drive and if I'm understanding correctly, there should be no danger transferring them to the pc.

any suggestions for antivirus freeware?
i'm trying PCTools and it seems to be choking the hell out of my cpu (90+% usage) every time I open an application, slowing it to a painful crawl.

Katrina

I use AVG Free - thom linked to it in his post.

brittleblood

avg here, too. unless the bottom falls out tomorrow, i'm happy with it.

Dr. Mutex

The day I realized I was running three different pieces of software just to try (and fail) to keep my box from being pwn'd was the day I downloaded and installed Ubuntu Linux. My response to needing to do a clean install to fix Windows was to treat the problem, not the symptoms. I'm not hauling out a soap box, just sayin'.

TimMason

I use Ubuntu as well, on one of our small portables. Easy to install, and easy to use. Next time I need a new desktop, I'll probably build my own machine (if I can do it - and I already have - so can you) and put OSX or Ubuntu on it.

thomnottom

You can't put OS X on a home-brew unless you do some serious hacking.

Not to get into a platform debate, but I never understand people who want to move from Windows to a more closed/proprietary system like OS X...

brittleblood

tim is in france...where they make the languages, o/s's and sauces conform to them.

TimMason

You just did get into a platform debate! Actually, I can understand suspicion of the Apple way of doing things - especially after an iMac gave up the ghost on me,and it emerged that the necessary replacement parts were no longer available, a mere five years after I bought the damned thing.

But - it's not that difficult to put OSX on an Intel box (anyway, I'll be retired, so it's not like I won't have the time), and once it's on an open machine, it's more or less a flavour of Unix, and you can do what you want with it if you're willing to use the terminal.

I've used Windows, Linux and OSX. For the simple user experience, the latter is way ahead of either of the other two. For stability and resistance to nasty stuff, both Linux and OSX are ahead of W.

dubdance

Using Windows, XP is the example here, open explorer, go to Tools, Folder Options, View, uncheck 'Hide extensions for known file types', check 'Hidden files and folders' under 'Hidden files and folders' . That will show up known file extensions, Windows usually hides them by default, it's similar to do with other M/soft OS's. Just in case anyone is tempted to visit less salubrious sites!

I'll go along with the AVG suggestions as a reliable antivirus, I've used Avast and Avira but have found both a bit slower and clunkier than AVG, though they both worked well on my set ups for Windows. I use Comodo's CIS, a combined firewall, antivirus, with it's added Defense+ on my main PC. It takes a few days to get tuned into your setup and use but once that's done it works really well I've found.

Edit - sorry I meant to link the Comodo software in.

selfrisinmojo

I was using AVG during the attack....it sniffed 'em out fine but as soon as I began trying to move and delete, it buckled at the knees and succumbed along with all other executables; perhaps I was asking too much. It was a valuable learning experience and I did come away with some music I would have a very hard time getting anywhere else.


when i get time, i do plan to build a system using linux; i use it extensively at work but have been too lazy to break it in at home

elwoodicious

@selfrisinmojo I switched while still a Windows sysadmin, I reached a saturation point for the "Microsoft Way" and told my wife that I'll be installing Ubuntu on all the laptops and PCs in the house and we never looked back. Side note to the story, that switch gave me the chance to retrain as a Linux sysadmin and I managed to double my salary in 2 years so it could be said, "Linux is money, baby!" ;-)

amclark2

for the linux heads; I have a rather old lap-top that's seriously limping, but still functional, with W-XP; I think it may only have 256 meg of ram; would it run Ubuntu or Xubuntu?

thomnottom

Ubuntu is more demanding as far as system resources go. Xubuntu would be the better choice as it strips out a lot of the bells and whistles.

The reason I'm back on Windows at home is Adobe Lightroom - couldn't guarantee colors on the VM I ran it on.

elwoodicious

@amclark2 Xubuntu is a definite possibility as is a new contender, Lubuntu, which is based on LXDE which is primarily aimed at low powered devices.

brittleblood

don't forget 68O/S!!! prickishly nimble and stylishly urbane, 68O/S is the pie-in-the-face response to all other O/S's.

amclark2

i tried 68O/S and it leaked brake fluid all over my desk. i will say though that viruses take one look at it and run like hell. rust is another matter.

tuco

I would recommend using AVG- But NOT the free version Get the one you pay for.
Many web sites, not just MP3 sites are infected (most unknowingly).
AVG-paid version will prohibit you from going to an infected site unless you over ride it (and why would you do that)
Its the best money you can spend on your computer. The free version is also good, but you get what you pay for.
I've had good results with it
Best of Luck

Dr. Mutex

@selfrisinmojo: Too lazy to install at home was where I was before I figured how much of my time was getting sucked up performing exorcisms,

If I was going to pay for any Windows antivirus it would be Nod32.

thomnottom

Uh-oh, now I might have to whip out a soapbox or something. The term "you get what you pay for" definitely doesn't apply to software. Way too much commercial proprietary crap out there has superior free and open source alternatives.

Personally I have run both Windows XP and Windows Vista for months at a time without any antivirus and not had a single infection. And trust me, it's not because I completely avoid less than reputable sites. For starters, if you're still using Internet Explorer just switching browsers to Firefox, Chrome, or Opera will do wonders. Every so often I am forced to use IE and am amazed that anyone would still be interested in the Internet after viewing it through that mess. As someone else pointed out, unhiding extensions goes a long way to make sure you are not accidentally launching executables.

And yes, if you absolutely insist on paying for antivirus I recommend NOD32 (using it on over 100 machines at work with only a couple hiccups). Otherwise my wife and I have been running the free version of Avast! for years without a problem. My last virus was in '96 - from a floppy disk left in during reboot.

Katrina

The term "you get what you pay for" definitely doesn't apply to software.
This is completely true, regarding the horror that is Norton Security. Actually, the free Norton/Symantec version that comes on all Sony, HP, Dell, Gateway and other PCs is so horrible, you need a special tool from Symantec to get rid of it. The normal Windows add/remove programs won't get rid of it.
I remember when Peter Norton was a hero to PC folks...I know he has nothing to do with this latest mess, but yikes! I'd be sad if my name was on that crap.

dubdance

thom - have you tried the IE Tab extension for Firefox to get around how certain sites demand IE on Windows? I've used it for some time and I really can't remember the last time that Firefox with the extension failed to fool sites that it was IE.

thomnottom

I used to use it regularly, but got back into the bad habit of begrudgingly opening Ye Olde Internete Explorere for crappy sites. Or just ignoring them...

And the people that require you to use IE are simply bad web developers - so they aren't going to understand how to truly block another browser.

selfrisinmojo

all of the input has been helpful, thanks.
since my wife does most of the navigating of our important data, she gets all the new equipment and stubbornly refuses to let me try anything new on it.
I use resuscitated family cast offs and as long as i don't expect young ,terrier like dexterity from the tired, old shade hounds, they suit my needs fine.
I had forgotten about firefox and will be loading that on my pc this evening.
I did lose my wav to mp3 utility; any suggestions on a good free version?

I am also having second thoughts about my suggestion that i crossed some ethical line by downloading out of print music from a source that is obviously not approved by the artist.
If that were the case, all the used records and cds i have purchased throughout the years would guarantee my own personal high rise in hell.

thomnottom

I use foobar2000 for the majority of my audio needs. It's not the easiest to setup, but is ridiculously configurable. You'll need the LAME binaries for converting to mp3 - get the first 3.98.2 bundle and unzip it wherever you want to keep them. It may not be what you're looking for, but give it a shot.

As for ethics, I sure hope the guidelines for Hell aren't set by U.S. copyright law. I certainly wouldn't scold you for such d/ls and I doubt the artists would either since they obviously aren't making any money from out of print release anyway. When it comes to music, even the legal acquisitions are not necessarily ethical (and I'm not talking about used purchases here).

dubdance

selfrisinmojo - dBpoweramp Music Converter(dMC) is pretty easy to use to convert a reasonable range of audio file formats. You can vary the audio quality as well.