mp3 files cause popup in WMP after 10sec

mp3 files cause popup in WMP after 10sec

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
mp3 files cause popup in WMP after 10sec =?Utf-8?B?QW5kcmV3?= 06-19-2008
Posted by =?Utf-8?B?QW5kcmV3?= on June 19, 2008, 12:15 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Here’s my mp3 problem…

When I play an mp3 in Windows Media Player audio stops after about 10
seconds, then I get a popup telling me to download a file from
flashcodec.com. The popup says:

You have chosen to open
Windows_Media_Player_Flash_Codec_Plugin.exe
which is a: Application
from: http://www.flashcodec.com

I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,
AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what
is causing my mp3's to cause the popup.

When I try to play the mp3's in Winamp I get the sound of a scratched CD or
they do not play at all, but no popup. On a side not I can play wav files
just fine. I have looked all over the internet for the solution or removal of
this problem but I can not find one.

The problem seems to be an embedded piece of code in all my mp3 files.

I've come to this conclusion because I just downloaded a few mp3’s from a
classical music website and the mp3’s play just fine in any media player.

This would mean that the problem is in my mp3 files. If the problem was with
the media player it would affect any mp3, old or new.

I also used Ashampoo and mp3Val to scan my mp3's and those two programs say
my mp3's are corrupted and can not be repaired.

I think at this point I have to delete all my mp3's, unless someone has
found a way to clean the infected mp3's.

Andrew
mcconvilleandrew@gmail.com


Posted by =?Utf-8?B?QW5kcmV3?= on June 19, 2008, 12:19 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Here is a link to someone else that is having the same problem as me, but
they posted in the wrong category:

http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windowsmedia&tid=95452d05-060a-48f0-9730-fd81f2c61cf5&cat=en_US_3c490c72-ee5e-4661-8ac5-558db34a117d&lang=en&cr=US&sloc=&p=1&mid=37b65edf-f109-4804-a509-1ec3201fcf4a

Posted by David H. Lipman on June 19, 2008, 4:31 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Here’s my mp3 problem…
|
| When I play an mp3 in Windows Media Player audio stops after about 10
| seconds, then I get a popup telling me to download a file from
| flashcodec.com. The popup says:
|
| You have chosen to open
| Windows_Media_Player_Flash_Codec_Plugin.exe
| which is a: Application
| from hxxp://www.flashcodec.com
|
| I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,
| AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what
| is causing my mp3's to cause the popup.
|
| When I try to play the mp3's in Winamp I get the sound of a scratched CD or
| they do not play at all, but no popup. On a side not I can play wav files
| just fine. I have looked all over the internet for the solution or removal of
| this problem but I can not find one.
|
| The problem seems to be an embedded piece of code in all my mp3 files.
|
| I've come to this conclusion because I just downloaded a few mp3’s from a
| classical music website and the mp3’s play just fine in any media player.
|
| This would mean that the problem is in my mp3 files. If the problem was with
| the media player it would affect any mp3, old or new.
|
| I also used Ashampoo and mp3Val to scan my mp3's and those two programs say
| my mp3's are corrupted and can not be repaired.
|
| I think at this point I have to delete all my mp3's, unless someone has
| found a way to clean the infected mp3's.
|
| Andrew
| mcconvilleandrew@gmail.com

When posting the URL of a possibly malicious site, please obfuscate the URL such
that the
link is not "clickable".

Ex: hxxp://www.flashcodec.com

flashcodec.com is registered by ESTDomains therefore a malicious site which
usually leads
to ZLob/FakeAlert type trojans. These are related to fake CODECS and
illegitimate Video
ActiveX files installed from them. I'm sure if we had a specifically crafted
URL, we would
get a Trojan downloaded instead of being redirected to Microsoft.

Right now I am getting an INDEX.HTML file that redirects me to Microsoft. That
can change.

MP3 files are often the target of Trojans and some Internet worms deliberately
corrupting
and/or deleting them.

You said ...
| I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,
| AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what
| is causing my mp3's to cause the popup.

What AV software is presently running on the PC ?
Did you have two or more anti virus products performing "On Accerss" scanning ?
Your post
sounds like this is the case.


1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap:
In Notepad.exe; Format --> uncheck; "Word wrap"

3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post in one of
the below
expert forums...


{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }

Forums where you can get expert advice for HiJack This! (HJT) and Deckard's
System Scanner
Logs.

NOTE: Registration is REQUIRED in the below before posting a log agt the The
SpyKiller
http://www.thespykiller.co.uk/index.php?board=3.0



--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Posted by =?Utf-8?B?U2FuZGVlcCBMYWhhbmdl on August 2, 2008, 8:25 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Dear All


long back mcafee find out solution on
windows_media_player_flash_codec_plugin.exe
pl. go through the link below link now Mcafee can remove the virus.

http://vil.nai.com/vil/content/v_147535.htm


Rgds,
Sandeep Lahange.

sandey14@myway.com

"Andrew" wrote:

> Here’s my mp3 problem…
>
> When I play an mp3 in Windows Media Player audio stops after about 10
> seconds, then I get a popup telling me to download a file from
> flashcodec.com. The popup says:
>
> You have chosen to open
> Windows_Media_Player_Flash_Codec_Plugin.exe
> which is a: Application
> from: http://www.flashcodec.com
>
> I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,
> AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what
> is causing my mp3's to cause the popup.
>
> When I try to play the mp3's in Winamp I get the sound of a scratched CD or
> they do not play at all, but no popup. On a side not I can play wav files
> just fine. I have looked all over the internet for the solution or removal of
> this problem but I can not find one.
>
> The problem seems to be an embedded piece of code in all my mp3 files.
>
> I've come to this conclusion because I just downloaded a few mp3’s from a
> classical music website and the mp3’s play just fine in any media player.
>
> This would mean that the problem is in my mp3 files. If the problem was with
> the media player it would affect any mp3, old or new.
>
> I also used Ashampoo and mp3Val to scan my mp3's and those two programs say
> my mp3's are corrupted and can not be repaired.
>
> I think at this point I have to delete all my mp3's, unless someone has
> found a way to clean the infected mp3's.
>
> Andrew
> mcconvilleandrew@gmail.com
>

Similar ThreadsPosted
Popup before login November 9, 2005, 6:59 am
Unwanted popup January 10, 2007, 5:03 pm
Help... Mystery Popup Virus?? (0/1) April 30, 2008, 10:03 am
Help... Mystery Popup Virus?? (another try) April 30, 2008, 10:15 am
Re: Help...Mystery Popup Virus??? (another try to send screen images) (1/3) April 30, 2008, 10:23 am
Re: Help...Mystery Popup Virus??? (another try to send screen images) (2/3) April 30, 2008, 5:32 pm
first time internet exp 7 user - drive cleaner popup warning January 13, 2007, 12:09 am
Zero kb files June 19, 2007, 12:08 pm
Re: Help with what to do with files August 15, 2007, 11:45 am
lost files July 1, 2005, 10:59 am

The site map in XML format XML site map

Contact Us | Privacy Policy