It changes the extension of all the media files like AVI (.avi), Music (mp3, ...) to .jpg.
This just canges the file extension. Not the file format. To play the media file, you need to re-change the file extension to the previous type, or open the file using the media player. Malware name is MediaControl.exe.
It internally creates a folder by name "mcont" in AppData of OS drive. AutoRun inside mcont also puts the MediaControl.exe to the winwos start up of msconfig.

How To Remove MediaControl.exe?:

1. Kill the process MediaControl.exe is running.

* Press Ctrl + Shift + Esc to open the windows taskmanager.
* Click on the Processes tab
* Search the MediaControl.exe, Click on End Process button at Bottom right.

2. Remove MediaControl link from Windows Start up

* Click on Windows Start Button, and on the Run option at the right side of the window,
* Type msconfig on the form opened at left bottom. This will open the System Configuration Utility.
* Click on Start Up tab.
* Search for MediaControl, Untick the link. Click Apply -> OK, Click on Exit Without Restart on the dialog opened.

3. Remove the AutoRun from Computer:

Option 1:
Using Command prompt inputs.

* Click on Windows Start Button, and on the Run option at the right side of the window,
* Type cmd, to open the command prompt window.
* Type the following command lines one by one.
o cd C:\Documents and Settings\All Users\Start Menu\Programs\Startup
o attrib -s -h -r /S /D *
o del *
o y
o cd C:\WINDOWS\system32\mcont\AutoRun
o attrib -s -h -r /S /D *
o del *
o y
o exit

Option 2
Using Safemode booting.

* Restart the Machine.
* Click F8 on Booting, this wil open the machine in safe mode for you.
* Browse for the folder mcont inside C:\Windows\System32\
* Delete the folder mcont.
* Restart the computer in the normal mode.
* Thats All.

Once you remove the mallware, your computer is free of mallware but, you are left with thousands of your media files changed its exentsion to .jpg. It is not an easy job to change the file extension one by one. You can use an Auto-Renamer programs.

We recomond you the AndRenamer program. You can download it here: [ftp://ftp2.antp.be/antp/software/antrenamer2_install.exe]