Sure!
The goal is to change any user's reference like c:\document & settings\john\.... with your username that actually is logged by you.
This, to prevent any bad links to other folders that are not yours!

So, the fix doesn't eliminate the malware from all mp3's. The only way to go ahead is to change the registry and/or try to make a deep scansion with last definitions of owned antivirus. (My personal opinion)

For who's infected, to avoid the bad link, edit hosts file into "c:\windows\system32\drivers\etc\" and insert these lines:
127.0.0.1 xxx.flashcodec dot com (write www instead xxx)
127.0.0.1 58.65.234.165
127.0.0.1 203.117.111.47
127.0.0.1 svbr.net

The result will show a blank page.

The fix should be rather simple,there should be one file,if the local
resident av scanner did not allready clean it.

Similar to this:
O20 - Winlogon Notify: winolo32 - C:\WINDOWS\SYSTEM32\winolo32.dll
win***32.dll<-- *=Random letters.

Couple of registry entries to search for which are the culprits,I seriously
doubt there is anything wrong with the mp3s

Key Reg Entry causing issues

HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\P references
"URLAndExitCommandsEnabled"

URLAndExitCommandsEnabled<-- This does not belong and should be removed.

Also others,most likely inert,can be found.

HKEY_USERS\S-1-5-21-Blah-Blah-Blah\Software\Microsoft\MediaPlayer\Preferences
"URLAndExitCommandsEnabled"

Remove the "URLAndExitCommandsEnabled" and you should be good to go.

Guys, I'm running XP SP2 and have NOD32, it detects no viruses or trojans :-(
By me, mp3 files are playable in WMP, but can not be opened to be converted.
It says: 'Division by zero' error. Winamp do not play any of them. It all
started when I have played mp3 files in Real Audio player. Now I have
unistalled RAplayer, but things didn't changed. I have just one account on
Windows (admin). How come that I can not play same files in winamp, but it
plays on WMAplayer? Also tried with Spanish .exe , but files are still
unplayable in winamp, and also can not convert them...What exactly should I
do with that Spanish file? I have put that .exe to folder with mp3's and
clicked on it, but after process done by it, nothing has changed. :-(((
I do not have pop-ups with link to bloody 'flashcodec', but have same
problem as all in this thread. Please help, anyone ???????'

"zw" wrote:

> The fix should be rather simple,there should be one file,if the local
> resident av scanner did not allready clean it.
>
> Similar to this:
> O20 - Winlogon Notify: winolo32 - C:\WINDOWS\SYSTEM32\winolo32.dll
> win***32.dll<-- *=Random letters.
>
> Couple of registry entries to search for which are the culprits,I seriously
> doubt there is anything wrong with the mp3s
>
> Key Reg Entry causing issues
>
> HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\P references
> "URLAndExitCommandsEnabled"
>
> URLAndExitCommandsEnabled<-- This does not belong and should be removed.
>
> Also others,most likely inert,can be found.
>
> HKEY_USERS\S-1-5-21-Blah-Blah-Blah\Software\Microsoft\MediaPlayer\Preferences
> "URLAndExitCommandsEnabled"
>
> Remove the "URLAndExitCommandsEnabled" and you should be good to go.

On Jun 18, 12:18*pm, Andrew <And...@discussions.microsoft.com> wrote:
> Update to my mp3 situation:
>
> The problem, for me, seems to be an embedded virus / spyware / malware in
> all my mp3 files. Unfortunately for me the registry modification max posted
> just suppresses the popup in windows media player, but the mp3's are still
> infected.
>
> I've come to this conclusion because I just downloaded a new mp3 from a
> classical music website and the mp3 plays just fine in any media player.

I thought I didn't have this problem, because once I fixed the
registry Windows Media Player plays my MP3s fine now. But then my
wife tried to play some of them on her MP3 player and they play really
weird, like they are playing in fast forward, and the time goes really
fast. We don't have this problem with MP3s that I have just
downloaded today, just the ones that were left over from when we had
the virus.

I notice that the MP3s, when I view the file properties in Windows
Explorer have one bit rate, like 130kbps, but then when I view the
properties from Windows Media Player they have a different bit rate,
like 128kbps. So I think the virus modified the bit rates slightly,
and probably Windows Media Player (the latest version) doesn't respect
that bit rate, so it doesn't have a problem, but my wife's MP3 player
probably does use that bit rate, so it doesn't play them correctly.

I'm searching now for a program that will let me edit the bit rate,
but not *really* convert, just edit the bit rate that the file
properties show... or actually "fix" the bit rate. I'm also going to
try to convert them to another format, then back to MP3, see if that
fixes them.