Remove new virus : AVI , MP3 files converts to JPG
April 1, 2009 by: maheshA new malware virus MediaControl.exe found in some parts of central asia late this month.
It changes the extension of all the media files like AVI (.avi), Music (mp3, ...) to .jpg.
This just canges the file extension. Not the file format. To play the media file, you need to re-change the file extension to the previous type, or open the file using the media player. Malware name is MediaControl.exe.
It internally creates a folder by name "mcont" in AppData of OS drive. AutoRun inside mcont also puts the MediaControl.exe to the winwos start up of msconfig.
How To Remove MediaControl.exe?:
1. Kill the process MediaControl.exe is running.
* Press Ctrl + Shift + Esc to open the windows taskmanager.
* Click on the Processes tab
* Search the MediaControl.exe, Click on End Process button at Bottom right.
2. Remove MediaControl link from Windows Start up
* Click on Windows Start Button, and on the Run option at the right side of the window,
* Type msconfig on the form opened at left bottom. This will open the System Configuration Utility.
* Click on Start Up tab.
* Search for MediaControl, Untick the link. Click Apply -> OK, Click on Exit Without Restart on the dialog opened.
3. Remove the AutoRun from Computer:
Option 1:
Using Command prompt inputs.
* Click on Windows Start Button, and on the Run option at the right side of the window,
* Type cmd, to open the command prompt window.
* Type the following command lines one by one.
o cd C:\Documents and Settings\All Users\Start Menu\Programs\Startup
o attrib -s -h -r /S /D *
o del *
o y
o cd C:\WINDOWS\system32\mcont\AutoRun
o attrib -s -h -r /S /D *
o del *
o y
o exit
Option 2
Using Safemode booting.
* Restart the Machine.
* Click F8 on Booting, this wil open the machine in safe mode for you.
* Browse for the folder mcont inside C:\Windows\System32\
* Delete the folder mcont.
* Restart the computer in the normal mode.
* Thats All.
Once you remove the mallware, your computer is free of mallware but, you are left with thousands of your media files changed its exentsion to .jpg. It is not an easy job to change the file extension one by one. You can use an Auto-Renamer programs.
We recomond you the AndRenamer program. You can download it here: [ftp://ftp2.antp.be/antp/software/antrenamer2_install.exe]
That was a great solution sir….. Thanks a lot.
thanks a lot for this. i know many people who have been affected by this. not all of them are tech savvy, so the steps u outlined will help them a lot.
thanku da…..
ur very intelligent
god bless u……………………………………………………..
I think the virus is on my iPod as well as my pen drive. How do i get it of those two..?
My all avi and .mp3 files got converted to jpeg.. I was searching solution for this virus.
Thank you for your solution. It worked perfectly.
that was simply stunning…thanks a lot… but how do you manage to do such kind of things… even i m a computer science student i simply cannot imagine myself of getting into such depth of computer knowledge… i will be glad if you could help me on learning doing such things.. waiting for your reply
That was a great solution..
Thanks a lot.. it worked..
Thanks a MILLION Buddy!!!!
u just saved my 700 GB of avi’s and mp3’s…
@anoop…uummm..there’s this new thing,it’s called “reading” hello…find what you want to know exactly and read on it.you don’t expect to be spoon fed now do you?
anoop..you are not a comp student if you dont know wat books to read or how to search the net…i suggest you go back to high skool…
thanks man it worked perfectly.. help others posting solutions for other viruses also
Thanx a lot man……… U r really great……..thanx again…..
great solution sir
thanks a lot for your help
Thanks a ton for putting this whole procedure up, it helped a lot.
Thanks a zillion tons again
Mr. Mahesh…there was no mediacontrol.exe process running or mediacontrol.exe link in my windows startup…! but all my mp3 files are converted to jgeg. what shall i do?
Great solution buddy. But I think, this wont help us to fully get rid of virus. We’ve to scan using (http://www.ziddu.com/download/3717628/00TS0_Trojan_Guarder_Gold_v7.42.rar.html) tool for complete removal of virus. just check it out.
Anyway thanks a lot
Anees
I did checked for all files which you have mentioned in step 1& 2 but I could not find those files with these names. Problem still persists in my PC any other solution or any virus remover that can be used. Pls help.
thanx a lot dude.u r really a great…thanx a lot again..
Wow… Thanks for the guidance… and the renamer programmer worked just fine… Thanks again !
its really working dude, thnks for the solution given,,,, i was able to save thousands of songs dude…thank u vry much
format yo pen drive to get rid of the virus
it was very useful………thanks a million…….
Hey buddy thanks a lot.. it worked
u saved all ma movies n songs… hats off 2 u da..
thanks again
Thanks!!
thanks
thank you so much boss ..u r a life saver..u rule
thanks a lot sir…really was tired of trying so many things…
gr8 idea…good work
thanku for suportme
Great Buddy!! Thanks a ton… It worked… Thanks Bro
thanx a loads, luv u…
it really worked…
just in 2 steps..
1) delete the file named mcont
C:\WINDOWS\system32\mcont
2) install the software and run it …
software hyperlink..
[ftp://ftp2.antp.be/antp/software/antrenamer2_install.exe]
i didnt find mediacontrol.exe in task manager and the file named mcont inside win/sys32 n i tried thru command prompt also can u please help me how to get rid of tis problem
Hi Mahesh,
Thanks a lot dude!. This is really a great solution
Hi thanks a lot u saved my files and could you please help me out converting the files from JPG file to Mp3/avi i have downloaded the software which is mentioned above but im not able to convert it please help me in converting.
hi sir. thanks for your help. you are great…
Iam not able to find the mcont folder in windows/system32.
Neither in mediaControl.exe in msconfig.
Plz help me out still all my files get convert into jpeg or avi
puneeth
if u get the answer plz help me out
COOL guyz
Hey dave you gona help on this “my files got converted into jpeg format and then one of the user wncrypted the file, then i tried your option on msconfig> ,edia control> uncheck> restart. i got my only few of my files back which was not encrypted.. doesn’t know what to do???????
How to use andnamer????
Thanks a lot finally i got all my media working properly again…..
U Rock
Thanks a million ur the savior of my music collection