Sophos has posted a blog article about a malware that tries to stop piracy by destroying all mp3 files on an infected computer.

If the computer is infected, a message box will show before users can log on which says “Stop piracy Musician Affairs, Do not Use MP3 again (quasi quasi-an) huahahahahaha!” which is loosely translated from an Indonesian language. The message appears because the malware modifies some registry entries related to WinLogon.

The file comes with a Winamp icon which looks like a regular mp3 file notes Prashant Kumar, the author of the article.

Source: Sophos