Re: mp3 files cause popup in WMP after 10sec
- From: "David H. Lipman" <DLipman~nospam~@Verizon.Net>
- Date: Thu, 19 Jun 2008 16:31:17 -0400
From: "Andrew" <mcconvilleandrew@xxxxxxxxx>
| Here?s my mp3 problem?
|
| When I play an mp3 in Windows Media Player audio stops after about 10
| seconds, then I get a popup telling me to download a file from
| flashcodec.com. The popup says:
|
| You have chosen to open
| Windows_Media_Player_Flash_Codec_Plugin.exe
| which is a: Application
| from hxxp://www.flashcodec.com
|
| I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,
| AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what
| is causing my mp3's to cause the popup.
|
| When I try to play the mp3's in Winamp I get the sound of a scratched CD or
| they do not play at all, but no popup. On a side not I can play wav files
| just fine. I have looked all over the internet for the solution or removal of
| this problem but I can not find one.
|
| The problem seems to be an embedded piece of code in all my mp3 files.
|
| I've come to this conclusion because I just downloaded a few mp3?s from a
| classical music website and the mp3?s play just fine in any media player.
|
| This would mean that the problem is in my mp3 files. If the problem was with
| the media player it would affect any mp3, old or new.
|
| I also used Ashampoo and mp3Val to scan my mp3's and those two programs say
| my mp3's are corrupted and can not be repaired.
|
| I think at this point I have to delete all my mp3's, unless someone has
| found a way to clean the infected mp3's.
|
| Andrew
| mcconvilleandrew@xxxxxxxxx
When posting the URL of a possibly malicious site, please obfuscate the URL such that the
link is not "clickable".
Ex: hxxp://www.flashcodec.com
flashcodec.com is registered by ESTDomains therefore a malicious site which usually leads
to ZLob/FakeAlert type trojans. These are related to fake CODECS and illegitimate Video
ActiveX files installed from them. I'm sure if we had a specifically crafted URL, we would
get a Trojan downloaded instead of being redirected to Microsoft.
Right now I am getting an INDEX.HTML file that redirects me to Microsoft. That can change.
MP3 files are often the target of Trojans and some Internet worms deliberately corrupting
and/or deleting them.
You said ...
| I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,
| AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what
| is causing my mp3's to cause the popup.
What AV software is presently running on the PC ?
Did you have two or more anti virus products performing "On Accerss" scanning ? Your post
sounds like this is the case.
1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe
2. Disable Notepad's word wrap:
In Notepad.exe; Format --> uncheck; "Word wrap"
3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sectools/Deckard/dss.exe
4. Save the scan results (Main.txt and Extra.txt)
5. And then post the contents of Main.txt and Extra.txt in your post in one of the below
expert forums...
{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }
Forums where you can get expert advice for HiJack This! (HJT) and Deckard's System Scanner
Logs.
NOTE: Registration is REQUIRED in the below before posting a log agt the The SpyKiller
http://www.thespykiller.co.uk/index.php?board=3.0
--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
.
- Prev by Date: Re: win antivirus pro - any definitive removal instructions yet?
- Next by Date: Re: Tmcomm errors/Trend Micro/Multi A/V Tool
- Previous by thread: pc was restarted when shutdown after installed AVG 8.0
- Next by thread: my pc was restart when i shutdown before install AVG 8.0
- Index(es):
Relevant Pages
|
