New Trojan Redirects to a Fake Media Codec Site

by Albin on November 6th, 2009 in Security Alert.

There's a new Trojan out there that will cause annoying pop-ups and change the desktop background to entice victims to purchase their services.  The new desktop background will appear like this:

If you choose to go further and click on the 'update now' button, you'll be redirected to a purchase page. This page gives a serious impression at first sight and the makers behind the site claim that:

“WinCodecPro is not just a set of codecs to improve the audio and video quality on your computer! This newest development of SPACE Technology, thanks to it we were able to improve video image by 68%,to improve sound effects by 32% and to improve the quality of Flash by 46%!For the last 8 years products of SPACE Technology have proved their strong unsurpassed quality! WinCodecPro”

The sad truth is that victims will be tricked into purchasing a trial package for $49.99 or the full package for $79.99.

This domain is fraudulent and plays on people’s lack of knowledge about media codecs. It’s recommended to always make some basic Google searches to verify how trustworthy the source is, to avoid scams like this.

Albin

Lavasoft Malware Labs