Jump to content

Malwarebytes

WinCodecPro can't get rid of it

- - - - -

11 replies to this topic

#1
ms-btv

    New Member

  • Members
  • Pip
  • 7 posts
Sorry for cutting in. But I am having the same issue with Wincodec Pro. I just cannot remove it.
Kaspersky, SpyBot and Malwarebytes do not seem to detect it.
If I run Combo-Fix Wincodec Pro seems to be removed until a system reboot.
Please advice. Many thanks!

#2
miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,127 posts
  • Gender:Female
  • Location:Belgium
Hi,

Can you post the log from Malwarebytes please?
Make sure it's up to date.
Also post the log from Combofix.
Mieke Verburgh
Assistant Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#3
ms-btv

    New Member

  • Members
  • Pip
  • 7 posts
Here you go. This time Malwarebytes found 2 items. I had those removed and then run Combo-Fix.
Thanks again!

Attached Files



#4
miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,127 posts
  • Gender:Female
  • Location:Belgium
Hi,

* Open notepad - don't use any other texteditor than notepad or the script will fail.
Copy/paste the text in the quotebox below into notepad:

Quote

Collect::[8]
c:\program files\Realtek\InstallShield\leAzMixerSel.exe
Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"leAzMixerSel"=-
"leield\leAzMixerSel"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\taskmgr.exe]

Save this as txtfile CFScript

Then drag the CFScript into ComboFix.exe as you see in the screenshot below.

Posted Image

This will start ComboFix again.
Then, please visit this site:
http://www.bleepingc...e.php?channel=8
Where it says: "Browse to the file you want to submit", use the Browse button to navigate to the following file: C:\Qoobox\Quarantine\[8]-Submit_date_time.zip (date_time will be replaced with the date and time when this file was created)
Then click the "Send File" button below in order to upload it.

After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply.
Mieke Verburgh
Assistant Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#5
ms-btv

    New Member

  • Members
  • Pip
  • 7 posts
Reboot was not requestes.
File is submitted as you requested.
Log file is attached here.
Thanks!

Attached Files

  • Attached File  log.txt   17.91K   45 downloads


#6
ms-btv

    New Member

  • Members
  • Pip
  • 7 posts
"Fatal Error" on my task panel is gone now (after reboot). Everything looks of so far. Resolution of the screen is not being changed.
My audio is still gone though. I have access to its adjustment - there is just no sound. Video is working OK.

#7
ms-btv

    New Member

  • Members
  • Pip
  • 7 posts
False alarm - sound is OK. Sorry.

#8
miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,127 posts
  • Gender:Female
  • Location:Belgium

Quote

I have access to its adjustment - there is just no sound.
Hi,

Did your sound come back automatically? Or did you have to adjust some settings to fix this?
Mieke Verburgh
Assistant Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#9
ms-btv

    New Member

  • Members
  • Pip
  • 7 posts
I looked around checked Realtek HD Audio Manager and "Wave" setting was set to Mute so I brought its volume up. Never used it before so didn't think of checking it initially.

#10
miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,127 posts
  • Gender:Female
  • Location:Belgium
Ok, thanks for the feedback. :)

Anyway, this looks OK again and malwarebytes has been updated to deal with your variant in a meanwhile as well :)

* Go to start > run and copy and paste next command in the field:

ComboFix /Uninstall

Make sure there's a space between Combofix and /
Then hit enter.

This will uninstall Combofix, delete its related folders and files, reset your clock settings, hide file extensions, hide the system/hidden files and resets System Restore again.

Let me know in your next reply how things are now.
Mieke Verburgh
Assistant Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#11
miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,127 posts
  • Gender:Female
  • Location:Belgium
Still with us?
Mieke Verburgh
Assistant Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#12
miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,127 posts
  • Gender:Female
  • Location:Belgium
Due to the lack of feedback, this Topic is closed.
If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
Mieke Verburgh
Assistant Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us