I don’t want to get all conspiratorial, but could this be another sick ploy by the RIAA to "deal with" muisc "piracy." Hope not, because this virus attacks legally purchased music in MP3 format as well
From PC Magazine
Monday August 6, 2007
Some malware hijacks your computer to send spam. Some steals your passwords and credit card numbers. But the worst malware crime of all has emerged: Symantec is reporting W32.Deletemusic, a worm that deletes all MP3 files on your system.
In all seriousness, Symantec categorized this threat as "Risk Level 1: Very Low" with somewhere between 0 and 49 infections observed at up to 2 sites. And those zeros are serious, it may not actually be in the wild.
The worm first copies itself to all drives in the system, including removable drives, as csrss.exe. It also creates a autorun.inf file so that the program will be run if the drive is mounted. It creates a "RunOnce" entry to run itself and, incredibly, names the entry "Worms":
Finally, it sets certain other registry values in order to make it harder to stop, by disabling Task Manager for example.
To stop threats like this, use common sense and good habits: install antivirus software and keep it up to date, and don’t go clicking on links and executable files from untrusted sources.