WMA TrojanDownloader.GetCodec is a medium profile risk for home users. This Trojan has been associated with fastmp3player.com website and makes use of fake audio and video files to infect the computer system. The size of the Trojan files is of variable length as these files are padded with nulls.
This Trojan offers some of the most popular mp3 and mpg files, which are posted on the servers connected to a peer to peer network. When the user downloads and plays a particular file, he/she is asked to download certain codec files necessary to play the file. User is presented with a nice looking web page with a EULA agreement and a check box to ensure that you legally want to install this software. All this is done to make the software and the installation process look original.
After the user clicks the “I Agree” button, FBrowsingAdvisor and SurfingEnhancer adware’s are downloaded on the system as specified in the EULA agreement. Before the installation ends, you will get an error message “regxpcom.exe – Unable To Locate Component” so that the user feels something wrong went with the installation. But, during the installation process, Trojan has infected the system.
