Malware epidemic!

Me and my sister were downloading music, and then suddenly avast caught a file that had WMA:Wipad [Drp]. We immediately put it into the chest, and my sister insisted on downloading one more song. That one had the same virus! Into the chest it went. And then another virus was found. This was stored in the chest. We were scared, but we deleted the files in the chest and started scanning. We had to go to a family reunion and didn’t come back until 9 PM. A virus was found, and so we put it into the chest. And then four others were found. We don’t know what to do! Was it because we left that the virus that was caught started reproducing? We are afraid of deleting it because were scared that it might just come back. What do we do?

  1. It was detected by the real-time scanner, just as Limewire was saving the music file. The other one was also caught by the background scanner.
  2. Where did it come from?? Well… Limewire.
  3. It was downloaded around 4pm last night.
  4. 5 files are infected, all of them music files.
    • Preview-T-3877628-qi dai.mp3
    • Preview-T-3545425-qi dai ni de ai jj lin.mp3
    • Preview-T-5745425-qi dai ni de ai jj lin.mp3
    • Preview-T-5745425-yume no tsubasa duet version.mp3
    • qi dai ni de ai jj lin.mp3
  5. Sorry, I don’t recall the exact wording of the message avast came up with.

Please help! After this, I think I’m going to head over to iTunes.

Hi…

In case avast has been compromised, I would run an online scan at one of these sites…

http://housecall65.trendmicro.com/

http://www.bitdefender.com/scan8/ie.html

In addition, I also recommend a regimen created by Tech, a fellow member of this forum. Go to this thread and read the last post…

http://forum.avast.com/index.php?topic=39312.msg330023#msg330023

Hope this helps…

Best Regards…

This ‘virus’ is a thing which is hidden in the false mp3 files. They’re WMA, with the redirector urls hidden inside. So, if it’s only found in ‘new’ stuff, then you’re safe, avast protected you. You may want to scan your mp3 collection, this malware often recompresses mp3s to wmas, infecting them with the redirecting url, pointing to another malware.