I have just been infected with the Colombia virus. My MP3's were all copied into 12kB VBS files (luckily I didn't lose them), and all my JPG files were lost (converted to 12kB VBS files). I have reason to believe this site may be the infection point. It's worth making sure that it isn't.

Excuse me, but what reasons you have to believe this site is the infection point?? Only possible thing I can even think of would be the account confirmation by email, but I really think people would have noticed something by now if this was the case. I really dont think hydrogenaudio spreads any email worm...

VBS_COLOMBIA
Aliases:
COLOMBIA, vbs/plan.a, plan.a, VBS/LoveLetter.worm, Vbs.Plan.A, VBS.LoveLetter.Variant, VBS/Loveletter.AS

Description:
This VBScript virus is another variant of the infamous VBS_LOVELETTER virus and uses the Windows Scripting Host (WSH) CSCRIPT.EXE/WSCRIPT.EXE to run the program. Once executed, it looks for files with specific file extensions and overwrites them with its codes. If the current system date is September 17, it displays a message and disconnects all network drives mounted by the user.

Aside from www.winamp.com and www.audiograbber.com-us.net this is the only site I've been to today, literally.

Eh so? Did you get email from hydrogenaudio.org domain today or what? It's an email worm.

This virus spreads via e-mail *only*. You should make sure you set up Outlook Express (since that's probably what you're using) to 'secure mode' or whatever it's called in the preferences.

Go Xing.

John

Yes. Go Xing.

Go Xing? You know where I want it to go

I very possibly could have caught LoveLetter from here, because I have e-mail notification turned on and thus have opened 5+ e-mails from the hydrogenaudio mailer.

I seriously doubt this has anything to do with hydrogenaudio. This site isn't run on windows or anything like that. Admittedly I haven't really read up on this virus, but I think whatever place was sending out this virus would have to be infected by it, and it requires the windows scripting host, that means it'd have to be running windows, which pretty much eliminates this site as a possibility.

Ok, good to know there's no problem with HydrogenAudio. The virus has been wiped from my computer, and the only remnant is the contents of My Computer looking odd when viewed "as a webpage"

Microsoft strikes again!