All my mp3 files were modified by "Kukacka"

Viruses and worms
1

Hi, everybody

Sorry , because my English it’s not so good, however I need some help if possible.

I had all my mp3 files (all my music) invaded by a worm named Kukacka (according to Avast), and they were transformed in “exe”.

I have scanned with Avast and all files infected now remain in quarentine.

Does anyone know how can I proceed to repair these files and have my music back again?

Thanks in advance for your help.

Juizinho

2

Don’t know how to repair the files myself, but others may come along to help with that soon.

The more important thing to remember here is why don’t you have a backup of your important data?

A system restore may help, provided that it isn’t infected as well.

3

Hi juizinho,

A malware removal routine for this malcode can be found here: http://forum.clubedohardware.com.br/resolvido-virus-kucacka/931075?s=2fa879537f8be65a079d2870be01d711&p=5018271
If that isn’t in your native language you can run Google translate for a translation,

polonus

4

well avast call it “Kukacka” and most others call it Sality…meaning a fileinfector

example
http://www.virustotal.com/file-scan/report.html?id=c5ea0ded598c551f4da2764f8fe861a7698b5ea555dec1de1c4f38f6e65442f3-1309254049

this usually means format and reinstall :cry:

anyway lets here what Essexboy say…

5

I do not feel it is sality as such, otherwise it would be more than MP3 files

However, I have not come across this one before so I will see what I can find out

6

It appears that Kukacka is a new generation of Sality.

Virut and other file infectors - Throwing in the Towel?

When Should I reformat? How Should I reinstall?

7

Hello,
can you send us (virus@avast.com) few samples to analyze and see if it is new variant and if the mp3 can be restored? Put “Kukacka infects mp3” to email subject.

Milos

8

If you could follow Milos as he is miles better than I at this sort of thing

9

Hi Milos
Thanks for you rcooperation.
I’ll try to send you by mail a small and infected folder in order you may check and perhaps get a solution to other people. .
However I’ve solved the problem and already formated my computer.
Thanks again.
Juizinho

10

Hi everybody
I want to thank everyone who tried to help me in this strange and unusual situation.
As you may see, by answer above,I have already faormated my computer.
Of course that I’ve lost all my old music files (Pink floyd, Stones, Led Zeppellin, Yes, Gentle Giant, king Crimson etc…), but I’m still alive and healthy.
Thanks again.
Juizinho