pozdrav svima
posto sam i ja nedavno postao zrtva ovog trojanca uspio sam naci rjesenje citajuci ovu temu i uspio sam rjesiti problem ove prokletinje koja mi je zarazila sve mp3 fajlove.
naravno ne bih mogao ovo iskombinovati ovo rjesenje da nije bilo korisnika gti2 koji je preporucio koristenje TC (zahvaljujem)
da sad ne prevodim sve na srpski, postavio sam temu na kaspersky.com
http://forum.kaspersky.com/index.php?showtopic=81493
a evo i ovde opis ali na eng.
Dear all,
i'm happy to say, that i have found solution against this Trojan downloader.
If you don't know about this evil trojan, it somehow transcodes your mp3 files and when you play them in winamp they sound very strange and annoying.
i'm bit sad to realize that KAV hasn't found a way to disinfect files (mp3 and wma) who have been infected with this trojan, but at least it keeps him from spreading around.
so....THE SOLUTION:
i've managed to find out by reading lots of posts that there is a way (maybe bit slow but it does the job) to cure infected files, so you wont have to delete you songs in the end.
in use with total commander and Dr.Web i've managed to do following:
STEP 1.
Use total commander to rename songs from mp3 to wma (there is an option "Multi rename tool" to rename complete content in a folder)
STEP 2.
Scan that folder (in which you renamed you mp3 songs to wma) with Dr.Web (this av will recognize that trojan as trojan.wma.loader) and use the option "cure it".
STEP 3.
after Dr.Web has cured those files you can rename them to mp3 with total commander (reverse STEP 1)
AND THAT'S IT!!!!!
I have scanned songs with KAV which i have "cured" in this way, and he reports them to be clean.
i did it several time to be sure (after rebooting WinXP) and it says that they're clean.
and i played them in winamp as well, and everything is OK
Notice:
in some cases, while scanning for this virus Dr.Web could find it in mp3 songs (without converting them to wma).
you can scan your folders before converting files to wma, but still if you find your self in situation in which dr.web can't find a trojan in specific folder (in which you know that there are infected files) try renaming and than scan them again.
i hope i have helped a bit.
eto, nadam se da ce biti od pomoci, jer sam se raspitivao na mnogo strana i niko mi nije mogao dati neko rjesenje sem brisanja fajlova.
opet cu pomenuti da nije bilo postova od korisnika gti2 sad bi mi vjerovatno particija gdje su mp3 fajlovi bila prazna.....
pozdrav