1. Symantec/
  2. Security Response/
  3. Attack Signatures/
  4. Fake App Attack: Fake Codec Website 5

Fake App Attack: Fake Codec Website 5

Severity: High

This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.

Description

An attempt to download a malicious file has been blocked. No further action is required, but you may wish to update your virus definitions and run a full system scan as a precautionary measure.

Additional Information

Malware authors often use social engineering techniques to trick users into downloading and installing malicious files. This technique involves presenting what looks like a video widget on a Web page. When an attempt is made to play the video, a message is displayed requesting that a codec, plug-in or update is required to be installed before the video can be viewed.

This signature is designed to prevent such files from being downloaded to the computer.

Affected

  • All versions of Microsoft Windows

Response

No further action is required but you may wish to perform some of the following actions as a precautionary measure.
Run the Norton Power Eraser. (home users)
Run the Symantec Power Eraser. (business users)
Update your product definitions and perform a full system scan.
Submit suspicious files to Symantec for analysis.

If you believe that the signature is reported erroneously, please read the following:
Report a potential false positive to Symantec.
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube