mp3 files cause popup in WMP after 10sec

[Guest Andrew]

Here’s my mp3 problem…

 

When I play an mp3 in Windows Media Player audio stops after about 10

seconds, then I get a popup telling me to download a file from

flashcodec.com. The popup says:

 

You have chosen to open

Windows_Media_Player_Flash_Codec_Plugin.exe

which is a: Application

from: http://www.flashcodec.com

 

I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,

AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what

is causing my mp3's to cause the popup.

 

When I try to play the mp3's in Winamp I get the sound of a scratched CD or

they do not play at all, but no popup. On a side not I can play wav files

just fine. I have looked all over the internet for the solution or removal of

this problem but I can not find one.

 

The problem seems to be an embedded piece of code in all my mp3 files.

 

I've come to this conclusion because I just downloaded a few mp3’s from a

classical music website and the mp3’s play just fine in any media player.

 

This would mean that the problem is in my mp3 files. If the problem was with

the media player it would affect any mp3, old or new.

 

I also used Ashampoo and mp3Val to scan my mp3's and those two programs say

my mp3's are corrupted and can not be repaired.

 

I think at this point I have to delete all my mp3's, unless someone has

found a way to clean the infected mp3's.

 

Andrew

mcconvilleandrew@gmail.com

[Guest Andrew]

Here is a link to someone else that is having the same problem as me, but

they posted in the wrong category:

 

http://www.microsoft.com/communities/newsg...09-1ec3201fcf4a

[Guest David H. Lipman]

From: "Andrew" <mcconvilleandrew@gmail.com>

 

| Here’s my mp3 problem…

|

| When I play an mp3 in Windows Media Player audio stops after about 10

| seconds, then I get a popup telling me to download a file from

| flashcodec.com. The popup says:

|

| You have chosen to open

| Windows_Media_Player_Flash_Codec_Plugin.exe

| which is a: Application

| from hxxp://www.flashcodec.com

|

| I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,

| AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what

| is causing my mp3's to cause the popup.

|

| When I try to play the mp3's in Winamp I get the sound of a scratched CD or

| they do not play at all, but no popup. On a side not I can play wav files

| just fine. I have looked all over the internet for the solution or removal of

| this problem but I can not find one.

|

| The problem seems to be an embedded piece of code in all my mp3 files.

|

| I've come to this conclusion because I just downloaded a few mp3’s from a

| classical music website and the mp3’s play just fine in any media player.

|

| This would mean that the problem is in my mp3 files. If the problem was with

| the media player it would affect any mp3, old or new.

|

| I also used Ashampoo and mp3Val to scan my mp3's and those two programs say

| my mp3's are corrupted and can not be repaired.

|

| I think at this point I have to delete all my mp3's, unless someone has

| found a way to clean the infected mp3's.

|

| Andrew

| mcconvilleandrew@gmail.com

 

When posting the URL of a possibly malicious site, please obfuscate the URL such that the

link is not "clickable".

 

Ex: hxxp://www.flashcodec.com

 

flashcodec.com is registered by ESTDomains therefore a malicious site which usually leads

to ZLob/FakeAlert type trojans. These are related to fake CODECS and illegitimate Video

ActiveX files installed from them. I'm sure if we had a specifically crafted URL, we would

get a Trojan downloaded instead of being redirected to Microsoft.

 

Right now I am getting an INDEX.HTML file that redirects me to Microsoft. That can change.

 

MP3 files are often the target of Trojans and some Internet worms deliberately corrupting

and/or deleting them.

 

You said ...

| I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,

| AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what

| is causing my mp3's to cause the popup.

 

What AV software is presently running on the PC ?

Did you have two or more anti virus products performing "On Accerss" scanning ? Your post

sounds like this is the case.

 

 

1. Download and execute HiJack This! (HJT)

http://www.trendsecure.com/portal/en-US/th.../HJTInstall.exe

 

2. Disable Notepad's word wrap:

In Notepad.exe; Format --> uncheck; "Word wrap"

 

3. Download/run Deckard's System Scanner:

http://www.techsupportforum.com/sectools/Deckard/dss.exe

 

4. Save the scan results (Main.txt and Extra.txt)

 

5. And then post the contents of Main.txt and Extra.txt in your post in one of the below

expert forums...

 

 

{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }

 

Forums where you can get expert advice for HiJack This! (HJT) and Deckard's System Scanner

Logs.

 

NOTE: Registration is REQUIRED in the below before posting a log agt the The SpyKiller

http://www.thespykiller.co.uk/index.php?board=3.0

 

 

 

--

Dave

http://www.claymania.com/removal-trojan-adware.html

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Guest Sandeep Lahange]

Dear All

 

 

long back mcafee find out solution on

windows_media_player_flash_codec_plugin.exe

pl. go through the link below link now Mcafee can remove the virus.

 

http://vil.nai.com/vil/content/v_147535.htm

 

 

Rgds,

Sandeep Lahange.

 

sandey14@myway.com

 

"Andrew" wrote:

<span style="color:blue">

> Here’s my mp3 problem…

>

> When I play an mp3 in Windows Media Player audio stops after about 10

> seconds, then I get a popup telling me to download a file from

> flashcodec.com. The popup says:

>

> You have chosen to open

> Windows_Media_Player_Flash_Codec_Plugin.exe

> which is a: Application

> from: http://www.flashcodec.com

>

> I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,

> AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what

> is causing my mp3's to cause the popup.

>

> When I try to play the mp3's in Winamp I get the sound of a scratched CD or

> they do not play at all, but no popup. On a side not I can play wav files

> just fine. I have looked all over the internet for the solution or removal of

> this problem but I can not find one.

>

> The problem seems to be an embedded piece of code in all my mp3 files.

>

> I've come to this conclusion because I just downloaded a few mp3’s from a

> classical music website and the mp3’s play just fine in any media player.

>

> This would mean that the problem is in my mp3 files. If the problem was with

> the media player it would affect any mp3, old or new.

>

> I also used Ashampoo and mp3Val to scan my mp3's and those two programs say

> my mp3's are corrupted and can not be repaired.

>

> I think at this point I have to delete all my mp3's, unless someone has

> found a way to clean the infected mp3's.

>

> Andrew

> mcconvilleandrew@gmail.com

> </span>