Hi, I need some help here. My PC had been infected by virus/spyware after I executed eMediaCode.exe and now it keep promoting me the "Security Alert: Spyware", "System Alert: Popups", pop ups IE and "Critical Security Message" message box. I had tried to clean it with Ad-Aware SE Personal, Windows Defender, Panda Software, ewido anti-malware and PcTools anti-spyware but it still keep showing the above message box. Appreciate if someone can guide me how to clean it. I am desperately need help on that. Thank you very much.

eMediaCode ~Trojan.Emcodec EMediaCodec pre-read: codec scan in safe mode for virus and spyware, or manually remove, # Drops the following files: * %Program files%\eMedia Codec\ecodec.exe * %Program files%\eMedia Codec\uninst.exe * %System%\dfrgsrv.exe (A copy of Trojan.Zlob.J) Note: * %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files. * %System% is a variable that refers to the System folder. By default this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP). # Adds the value: "" = "{6BF52A52-394A-11D3-B153-00C04F79FAA6}" to the registry subkey: HKEY_CLASSES_ROOT\EMediaCodec.Chl\CLSID # Creates the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\ Microsoft\Windows\CurrentVersion\Uninstall\eMedia Codec # Executes the copy of Trojan.Zlob.J it dropped and deletes the file %ProgramFiles%\eMedia Codec\ecodec.exe. 6B 69 6C 72 6F 79 20 77 61 73 20 68 65 72 65

Hi bofra, Thanks for your reply. I had double check Program Files directory but couldn't find the file specified. FYI, I had uninstall eMediaCode from Add/Remove Application. I had tried to use symantec antivirus with the latest update to scan, but symantec was unable to find the virus. Now, there is still pop up IE and "critical system error" message box pop up anytime and there's also a small triangle icon with exclamation mark popping up alert "System Alert: Spyware Detected. System has detected 4 active spyware application that may cause your computer to crash and restart, slow it to a crawl and even shut down it entirely. Click the icon to get rid of unwanted spyware". When I click on the icon, it will open IE to http://www.pesttrap.com/?advid=177 . Besides that, there will be IE pop ups to porn site every hour. Do you know what kind of virus of spyware is that? Thanks.

Good advice given by Bofra, but if you are unable to follow those steps - i pulled a site that may help. (it has a few tools for you and gives a step by step. http://www.precisesecurity.com/computer-virus/avte-apr010.htm It's just a bit of a step by step guide of Bofras advice, with a few downloadable tools. Hope that helps you Jim.

Thanks Jim for your reply. I just checked out the link as provided by you and can't find KEY_CLASSES_ROOT\EMediaCodec.Chl entry in my registry. I guess the emediacodec spyware had been removed but there are some other spyware being installed by emediacodec to my pc. Thus I believe there's more than 1 spyware currently in my pc. FYI, I got the following triangle alert message occassionally: 1. Security Alert! System encountered spyware that collects your personal information without your consent. This information includes passwords, credit card details and other private data. Click the icon to learn more ways to protect your files. 2. Urgent System Message: Virus! Your computer is infected with last version of internet trojan (iworm_attck_v122.02a). It is highly recommended that your install antivirus software. Click the icon for more information. 3. System Alert: Adware & Spyware. Your computer performance slowed down. Your internet connection speed had decreased. You recieve more spam emails than ever. Use Spyware scan to find out the reason. 4. System Alert: Popups. Your computer is infected with spyware managing pop-up advertisements (OHPE ver 4.12_23). Click the icon to learn more on what you can do about pop-up windows and other unwanted software. And there's a pop up message box: Critical System Error! Please read this message carefully. Your PC is infected by spyware. Spyware and other unwanted software refers to program that perform certain tasks on your computer, typically without your consent. This can include installing pop-up advertising or collecting your personal information. Anti-spyware tools can only help rid your computer of spyware. Click "OK" to get software and special offers on antivirus software. Appreciate any help. Thanks.

The issue had been resolved now, please close this topic and thanks everyone for your help.

Help ? How was this resolved ? I have same issue Thanks