Friday, May 16, 2008

New highly deceptive method for fake codec

Fake codecs typically push for a special “Active X” or “Codec” install.

Here’s one trying to tell the user they are missing Flash.  Notice how convincing it is:


Fakeflash123888


What’s actually pushed is the trojan MediaTubeCodec.

(In case you’re wondering, Flash is certainly installed on that system.)


Alex Eckelberry
(Thanks, Patrick Jordan)

No comments:

Post a Comment