Virus:EXP/ASF.GetCodec.Gen
Date discovered:15/10/2008
Type:Exploit
In the wild:Yes
Reported Infections:Low
Distribution Potential:Low
Damage Potential:Low
Static file:No
Engine version:7.09.00.04

 General Method of propagation:
   • No own spreading routine


Alias:

It was previously detected as:
   •  SPR/ASF.GetCodec.Gen


Side effects:
   • Makes use of software vulnerability

 Special detection  EXP/ASF.GetCodec.Gen

Description:
EXP/ASF.GetCodec.Gen is a detection for multimedia files that contain a special command to download new codecs. Normally, codecs are required to play video or audio formats. This mechanism got hijacked by malware, which simply downloads Trojans instead of a real new codec. ASF, WMA and WMV files are affected, a recent Trojan converts MP3 files into the ASF file format and adds a command to download malicious code. The Wimad Trojan family also uses this method.

Version history:
The following engine updates were released in order to enhance detection:

   •  7.08.01.18   ( 06/08/2008 )
   •  7.09.00.04   ( 15/10/2008 )

Description inserted by Andrei Gherman on Thursday, October 16, 2008
Description updated by Andrei Ivanes on Monday, October 20, 2008

Back . . . .