MediaTubeCodec
Malware March 22nd, 2008A new rebranded version of VideoAccessCodec has been found, named MediaTubeCodec. Once installed, it delivers popup advertisements and hijacks search engine results. The codec installs a few of the following files and registry entries.
C:\Windows\aflqfkw.dll
C:\Windows\btpqkmo.dll
C:\Windows\ewrssvw.dll
C:\Windows\fvxqfwq.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CEB30BF4-A67C-40D3-AA8F-4F839B84F747}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
aflqfkw = {2F0E6889-B50D-4FDD-9D6F-DFE89DB02E5F}
btpqkmo = {19B88BB2-FBD1-4D3E-A99B-AB96D58AAFCB}
We have provided removal instructions for anybody unfortunate to have been infected by this codec.
March 22nd, 2008 at 11:20 am
Prosty i czysty opis.Pozdrawienia dla @Marcin.
April 8th, 2008 at 10:56 am
Thank you very much for developing the Malwarebytes-AntiSpyware program (ver 1.1). I was infected with the mediatubecodec virus & your program was the the first to find it & eliminate it. I tried running AdAware, SpyBot, & PCcillin programs & each took about 2hrs to run & could not even find any spyware/virus’s (as the rogue message popups & IE redirects kept occuring during their scanning - Haha). Your program took 5 min & 16 sec and fixed almost everything in one shot. The last remaining problem was the TaskManager program was still disabled, but I got that fixed with info from the PCHell website. Thanks again for your great product!!
April 17th, 2008 at 2:43 am
I have to tell you thank you thank you thank you you saved my pc i downloaded the mediatubecodec virus and my comp went nuts started playing music that i did not have and my touchpad seemed to be possessed i ran adware and spybot and nothing it told me my pc was fine your product helped me when i thought i was going to have to pay 100’s to have it repaired thank you so very much
April 20th, 2008 at 8:07 pm
Finding the taskmanager is real hard. Regedit.exe will show you a crap load of different things, but I can find it if I look. I deleted the thing that turns it off, so It’ll NEVER happen again. I’m still infected with worm.win32.netbooster, and I have to delete HKEY\SOFTWARE\Microsoft\VideoPlugin to make it run faster momentarily.
May 17th, 2008 at 2:22 pm
thank you so much i went to watch this video on this 1 website and it said i needed this program. you guys rock. i didnt know what it really did. thank you so much. I hope when i go to college i can help make programs like you guys to help the compouter industry out
June 4th, 2008 at 11:38 am
Thanks for making such useful program! But I still have the following problem: when i try to boot my system i see black screen only, but when i boot in safe mode it is ok. So what’s the problem?
July 4th, 2008 at 11:51 am
Everyone says this program is good, and I’m sure it is, but it will not install. The malware seems to block all installations of removal software such as Spybot and this one. Also blocks access to their websites and adaware cannot update.
July 6th, 2008 at 3:43 am
This program removed the mediatube virus from my computer so i am very glad about that, but now i have another problem! whenever my wireless card connects to my router, it only stays connected for about 10-15 seconds, then it disconnects and automatically reconnects, and again after about 10-15 seconds it disconnects. This crap is driving me crazy!!! if it wasn’t for the popups in the bottom right corner of the screen it wouldn’t be so annoying but that crap is really pissing me off. it’s connected, it’s disconnected, it’s connected, it’s disconnected, it’s connected, it’s disconnected, over and over and over and over and OVER AND OVER AND OVER AND OVER!!!
someone please tell me how to fix this, did i remove something i shouldn’t have?
July 6th, 2008 at 4:08 am
oh i figured it out, i had to turn off upnp in my routers settings.
the wierd thing is that i’ve never had that problem before, and i’ve never messed with the upnp settings before, so i don’t get why the problem would suddenly start happening after i used the malware remover. maybe the virus somehow turned on upnp? i didn’t think a virus could change the settings of my router