Lyrical Gangster.mp3 Anyone heard about this?

[Thread_Necro]

I own a computer repair store and on multiple occasions, I've encountered a trojan hidden inside of an MP3. Not just any mp3 but each system ( a total of 4 so far ) had a trojan imbedded mp3 song called LYRICAL GANGSTER.

I've taken the trojan mp3 into a virtualized enviroment for testing, but if anyone knows anything about this Trojan, please share. I will also report my findings, especially if within a 30 mile radius of my shop, 4 systems have found me with this mp3 trojan.

I hope its not just a ghost in my antivirus software.

[outlaw2001it]

Checked online, and a few tech friends of mine here in Europe...nothing came up. Have you tried to clean/repair, or even the mp3? Not sure what to tell ya. I've checked a couple webpages for the mp3, and doesn't look like there's a virus embeded in it. Matter of fact, a few download places have an anti-virus installed on their systems.

[SiliconJon]

Is it an actual MP3 file or merely a file using a false MP3 extension?

[Thread_Necro]

I wont know until i try executing it later in my virtual XP and Ubuntu.

I was thinking making several copies, changing the extensions on them to .jpg, .txt, .exe, .dll and opening them in a hex editor/decompiler/ default programs.

I'm not a fluent coder so any other experiments i could run, let me know.

[SiliconJon]

No need to rename for the hex editor examination. A program such as that below may assist in discovery the true file type in which the virus has embedded itself.

File identifier for Windows, DOS and Linux

Marco Pontello's Home - Software - Online TrID