mp3 files cause popup in WMP after 10sec

[Andrew]

Here’s my mp3 problem…

When I play an mp3 in Windows Media Player audio stops after about 10
seconds, then I get a popup telling me to download a file from
flashcodec.com. The popup says:

You have chosen to open
Windows_Media_Player_Flash_Codec_Plugin.exe
which is a: Application
from: http://www.flashcodec.com

I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,
AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what
is causing my mp3's to cause the popup.

When I try to play the mp3's in Winamp I get the sound of a scratched CD or
they do not play at all, but no popup. On a side not I can play wav files
just fine. I have looked all over the internet for the solution or removal of
this problem but I can not find one.

The problem seems to be an embedded piece of code in all my mp3 files.

I've come to this conclusion because I just downloaded a few mp3’s from a
classical music website and the mp3’s play just fine in any media player.

This would mean that the problem is in my mp3 files. If the problem was with
the media player it would affect any mp3, old or new.

I also used Ashampoo and mp3Val to scan my mp3's and those two programs say
my mp3's are corrupted and can not be repaired.

I think at this point I have to delete all my mp3's, unless someone has
found a way to clean the infected mp3's.

Andrew
mcconvilleandrew@gmail.com

 

[Andrew]

Here is a link to someone else that is having the same problem as me, but
they posted in the wrong category:

http://www.microsoft.com/communitie...&p=1&mid=37b65edf-f109-4804-a509-1ec3201fcf4a

 

[David H. Lipman]

From: "Andrew" <mcconvilleandrew@gmail.com>

| Here’s my mp3 problem…
|
| When I play an mp3 in Windows Media Player audio stops after about 10
| seconds, then I get a popup telling me to download a file from
| flashcodec.com. The popup says:
|
| You have chosen to open
| Windows_Media_Player_Flash_Codec_Plugin.exe
| which is a: Application
| from hxxp://www.flashcodec.com
|
| I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,
| AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what
| is causing my mp3's to cause the popup.
|
| When I try to play the mp3's in Winamp I get the sound of a scratched CD or
| they do not play at all, but no popup. On a side not I can play wav files
| just fine. I have looked all over the internet for the solution or removal of
| this problem but I can not find one.
|
| The problem seems to be an embedded piece of code in all my mp3 files.
|
| I've come to this conclusion because I just downloaded a few mp3’s from a
| classical music website and the mp3’s play just fine in any media player.
|
| This would mean that the problem is in my mp3 files. If the problem was with
| the media player it would affect any mp3, old or new.
|
| I also used Ashampoo and mp3Val to scan my mp3's and those two programs say
| my mp3's are corrupted and can not be repaired.
|
| I think at this point I have to delete all my mp3's, unless someone has
| found a way to clean the infected mp3's.
|
| Andrew
| mcconvilleandrew@gmail.com

When posting the URL of a possibly malicious site, please obfuscate the URL such that the
link is not "clickable".

Ex: hxxp://www.flashcodec.com

flashcodec.com is registered by ESTDomains therefore a malicious site which usually leads
to ZLob/FakeAlert type trojans. These are related to fake CODECS and illegitimate Video
ActiveX files installed from them. I'm sure if we had a specifically crafted URL, we would
get a Trojan downloaded instead of being redirected to Microsoft.

Right now I am getting an INDEX.HTML file that redirects me to Microsoft. That can change.

MP3 files are often the target of Trojans and some Internet worms deliberately corrupting
and/or deleting them.

You said ...
| I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,
| AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what
| is causing my mp3's to cause the popup.

What AV software is presently running on the PC ?
Did you have two or more anti virus products performing "On Accerss" scanning ? Your post
sounds like this is the case.


1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap:
In Notepad.exe Format --> uncheck "Word wrap"

3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post in one of the below
expert forums...


{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }

Forums where you can get expert advice for HiJack This! (HJT) and Deckard's System Scanner
Logs.

NOTE: Registration is REQUIRED in the below before posting a log agt the The SpyKiller
http://www.thespykiller.co.uk/index.php?board=3.0



--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

 

[Sandeep Lahange]

Dear All


long back mcafee find out solution on
windows_media_player_flash_codec_plugin.exe
pl. go through the link below link now Mcafee can remove the virus.

http://vil.nai.com/vil/content/v_147535.htm


Rgds,
Sandeep Lahange.

sandey14@myway.com

"Andrew" wrote:

> Here’s my mp3 problem…
>
> When I play an mp3 in Windows Media Player audio stops after about 10
> seconds, then I get a popup telling me to download a file from
> flashcodec.com. The popup says:
>
> You have chosen to open
> Windows_Media_Player_Flash_Codec_Plugin.exe
> which is a: Application
> from: http://www.flashcodec.com
>
> I have run NOD32, Windows OneCare, Windows Defender, PCTools Spyware Doctor,
> AdAware, BitDefender, Panda Scan and HiJackThis. None of them can find what
> is causing my mp3's to cause the popup.
>
> When I try to play the mp3's in Winamp I get the sound of a scratched CD or
> they do not play at all, but no popup. On a side not I can play wav files
> just fine. I have looked all over the internet for the solution or removal of
> this problem but I can not find one.
>
> The problem seems to be an embedded piece of code in all my mp3 files.
>
> I've come to this conclusion because I just downloaded a few mp3’s from a
> classical music website and the mp3’s play just fine in any media player.
>
> This would mean that the problem is in my mp3 files. If the problem was with
> the media player it would affect any mp3, old or new.
>
> I also used Ashampoo and mp3Val to scan my mp3's and those two programs say
> my mp3's are corrupted and can not be repaired.
>
> I think at this point I have to delete all my mp3's, unless someone has
> found a way to clean the infected mp3's.
>
> Andrew
> mcconvilleandrew@gmail.com
>