Virus:SPR/ASF.GetCodec.Gen
Type:Security Privacy Risk
In the wild:Yes
Reported Infections:Low
Distribution Potential:Low
Damage Potential:Low
Static file:No
Engine version:7.08.01.19

 General Method of propagation:
   • No own spreading routine


Alias:

Similar detection:
   •  EXP/ASF.GetCodec.Gen


Platforms / OS:
   • Windows 95
   • Windows 98
   • Windows 98 SE
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003


Side effects:
   • Downloads a malicious file

 Special detection  SPR/ASF.GetCodec.Gen

Description:
SPR/ASF.GetCodec.Gen is a detection for multimedia files that contain a special command to download new codecs. Normally, codecs are required to play video or audio formats. This mechanism got hijacked by malware, which simply downloads Trojans instead of a real new codec. ASF, WMA and WMV files are affected, a recent Trojan converts MP3 files into the ASF file format and adds a command to download malicious code. The Wimad Trojan family also uses this method.

Version history:
The following engine update was released in order to enhance detection:

   •  7.08.01.19   ( 07/08/2008 )

Description inserted by Andrei Gherman on Tuesday, September 2, 2008
Description updated by Andrei Ivanes on Monday, October 20, 2008

Back . . . .