Question - mmjukeboxx.exe - new virus or spyware??

  • Thread starter Thread starter Melanie
  • Start date Start date
M

Melanie

OK I need some help here and need information as quickly as possible.
I work for a university and on some of our lab machines running Windows
XP, we recently have run across a file called mmjukeboxx.exe

There is no information anywhere about it, I have looked everywhere.
If it is running on a machine, it will eventually suck up all available
ports and make it impossible to go online. Please if anyone knows
anything, let me know! Thank you!
 
Melanie said:
OK I need some help here and need information as quickly as possible.
I work for a university and on some of our lab machines running Windows
XP, we recently have run across a file called mmjukeboxx.exe

There is no information anywhere about it, I have looked everywhere.
If it is running on a machine, it will eventually suck up all available
ports and make it impossible to go online. Please if anyone knows
anything, let me know! Thank you!
Click to expand...


Try submitting it to:
http://www.virustotal.com/flash/index_en.html

From what I can guess from this German page:
http://www.nickles.de/c/a/archiv2002-536985725.htm
It's "Music Match Jukebox" which rings a bell as being a benign
music-playing program.

If you still can't get anywhere, zip it and email it to me if you want.
aD at simply peachy dot co dot fish
Swap a uk for the fish.


aD
 
Thanks! I made the mistake of not making a copy the last time I saw it
- next time I plan to copy it over to my machine and submit it...

I thought it was music match jukebox too, but that program's executable
doesn't spell out jukebox, and only has one X on it. Plus, the
computers with it do not have any remnants of that program on it that I
could find. As soon as I see it again, I will submit it. Thanks!
 
Melanie said:
OK I need some help here and need information as quickly as possible.
I work for a university and on some of our lab machines running Windows
XP, we recently have run across a file called mmjukeboxx.exe

There is no information anywhere about it, I have looked everywhere.
If it is running on a machine, it will eventually suck up all available
ports and make it impossible to go online. Please if anyone knows
anything, let me know! Thank you!
Click to expand...

FYI: Started up my MusicMatch and it doesn't run the process you named.
 
FYI: Started up my MusicMatch and it doesn't run the process you named.
Click to expand...

MMjukebox.exe is a file belonging to MusicMatch (maybe an older
version), but it's written with only one X.

Because it's happening in a university lab and a google search for the
filename (with 2 x-es) turns up nothing, I'd assume it is something
some student left behind and he's the one who named it like that.
It could be anything, a renamed BackOrifice for example.

Melanie: it's definitely not something you need, so get rid of it.
 
Well I caught the file! I sent it to the web page mentioned...we'll
see what they have to say!
 
Update!! Mcafee DOES NOT catch this file, but Symantec does. It is a
version of the Gaobot virus - this is what the report said from
Symantec:

W32.HLLW.Gaobot

Y'all may want to be on the lookout for this!
 
On that special day, Melanie, ([email protected]) said...
It is a
version of the Gaobot virus
Click to expand...

Ouch. Gaobot is the nastiest beast have ever heard of - it is a trojan
AND a worm altogether. I am afraid, you will have to format all machines
where it has been. The Gaobots can be *anything*, because the author
published the code before he was arrested, which means, everyone can
create a new version with other "features" included, which might be
everything, eg logging the keyboard and reading the passwords from the
accounts of university personnel, and sending them to a mailbox
someplace in the world, enabling the recipient to read the contents of
the scientific research results.


Gabriele Neukam

(e-mail address removed)
 
Back
Top