Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

How To Get Rid Of Newmediacodec Trojan?


  • Please log in to reply
1 reply to this topic

#1 xxbliss613xx

xxbliss613xx

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:08:26 PM

Posted 26 June 2008 - 09:30 AM

HEY EVERYONE. I NEED SOMEONE TO HELP ME ASAP. ON SUNDAY I WAS ON MY COMPUTER AND THIS POP UP CAME UP AND I THOUGHT I CLICKED TO EXIT IT BUT INSTEAD IT STARTED TO DOWNLOAD. WHEN I EVENTUALLY CLICKED CANCEL IT'S LIKE IT DIDN'T WANT TO CANCEL. THE NEXT DAY WHEN I WENT ON MY COMPUTER MY BACKGROUND WAS THIS RED BACKGROUND WITH LIKE A DANGER SIGN STATING MY PRIVACY IS HACKED AND TO LOAD A SPYWARE. ON MY START MENU MY DOCUMENTS, PICTURES, SEARCH, RUN, CONTROL PANEL WERE ALL MISSING AS WELL. WHEN I TRIED TO HIT CTRL+ALT+DEL MY TASK MANAGER BAR WOULD NOT COME UP AND SAID SOMETHING THAT MY ADMINISTRATOR HAS LOCKED IT.

I RAN YAHOO'S ANTI-VIRUS AND MY WERBOOT SPYWARE PROGRAM AND QUARITINED THE TROJAN. THEN I WENT AHEAD AND DOWNLOAD SMITFRAUDFIX.EXE AND IT MADE MY BACKGROUND BACK TO NORMAL.

THE NEXT DAY I WENT BACK ONTO MY COMPUTER AND NOW ALL MY PROGRAMS WILL NOT WORK EXCEPT STUPID INTERNET EXPLOER. ANYTHING I TRY TO DOWNLOAD/INSTALL/SETUP OR JUST OPEN WILL NOT OPEN. IT STATES THAT I NEED TO PICK A PROGRAM TO OPEN IT OR SOMETHING THAT IT WILL OPEN USING IT'S WEBSITE BUT IT STILL DOES NOT WORK.

I CANNOT DOWNLOAD/INSTALL/SETUP ANY PROGRAMS OR OPEN PROGRAMS LIKE I STATED.

CAN SOMEONE PLEASE TRY AND HELP ME GET RID OF THIS STUPID NEWMEDIACODEC TROJAN. I NOTICED THAT EVERYTHING IS UNDER A [color="#FF0000"]
".LNK"

PLEASE HELP AS SOON AS POSSIBLE.

THANK YOU,
MARTHA

Edited by xxbliss613xx, 26 June 2008 - 09:34 AM.


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,482 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:26 PM

Posted 26 June 2008 - 12:08 PM

Some malware infections target .exe files and without repairing that file association your .exe files will lose functionality.

The first thing to try is to check your file association for .exe files. Open the "File Types" dialog box in Windows Explorer or My Computer. Go to Tools > Folder Options > File Types tab. Scroll down to where .EXE would be in the alphabetical order and make certain .EXE is not there. If it is, then edit it there by changing the association to Application. Select the New button, type in EXE for the extension and select the Advanced button. From the list pick "Application."

If that does not resolve the problem, try downloading EXE File Association Fix and save to your Desktop. Extract (unzip) xp_exe_fix.zip and double-click on xp_exe.fix.reg and choose "Yes" to merge it into the registry when prompted. Once you get a successful message delete the file and reboot.

Also see:
"Unable to Start a Program with an .exe File Extension"
"Fix or Restore Broken .EXE .LNK .COM Association Caused by Virus"

Note: Some of these steps involve making changes in the registry. Always back up your registry before making any changes. If you are not familiar with working in the registry, then you should NOT attempt to make any changes on your own. Improper changes to the registry could adversely affect your computer and render it inoperable.

If you cannot download any programs from the Internet, you are going to need access to another computer (family member, friend, etc) with an Internet connection. Download the following programs and save them to a flash (usb, pen, thumb, jump) drive or CD. Then transfer these programs directly to the infected computer where you can use them.

Please print out and follow the generic instructions for using "SmitfraudFix".
-- If you have downloaded SmitfraudFix previously, please delete that version and download it again as the tool is frequently updated!
-- If using Windows Vista be sure to Run As Administrator
  • Make sure you scroll down to Clean and perform the steps where you reboot in "Safe Mode" and run option #2.
  • The tool will go through a series of cleanup processes and automatically start the Disk Cleanup program to remove Temporary files. Wait for it to complete and Disk Cleanup to finish.
-- If the tool fails to launch from the Desktop, please move smitfraudFix.exe to the root of the system drive (usually C:\), and run it from there.

Go to Start > Control Panel > Display. Click on the "Desktop" tab, then the "Customize Desktop..." button.
Click on the "Web" tab, then under Web Pages, uncheck and delete everything you find (except "My Current Home page").
These are some common malware related entries you may see:
  • Security Info
  • Warning Message
  • Security Desktop
  • Warning Homepage
  • Privacy Protection
  • Desktop Uninstall
If present, select each entry and click the Delete button.
Also, make sure the Lock desktop items box is unchecked. Click "Ok", then "Apply" and "Ok".

Please download Malwarebytes Anti-Malware and save it to your desktop.
alternate download link 1
alternate download link 2
  • Make sure you are connected to the Internet.
  • Double-click on Download_mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself.
  • Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply and exit MBAM.
Instructions with screenshots if needed.

Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users