Guide | How To Watch out for Fake Codecs

The associated guide may contain user-generated or external content.

Ink

Administrator
Thread author
Verified
Jan 8, 2011
22,490
Internet savvy user may already be aware of these tactics, but for those who aren't, see below. This also may be why many recommend using an AdBlocker; most common are browser extensions (ie. AdBlock or AdBlock Plus)

You may encounter this whilst browsing online video sites to catch-up with the latest movies or TV shows, without an AdBlocker. While it may not cause an immediate danger, falling for the bait and you may end up with unwanted software or even a virus on your PC.

[attachment=4019]
Image 1: A message that duplicates the browsers methods of informing the user, a "HD video codec is missing" with an "Install" button.

[attachment=4020]
Image 2: Does this look familiar? Looks like the Chrome's website, but it's a copy with a download for the fake codec.

[attachment=4021]
Image 3: Hmm.. the landing page doesn't exist.


Let's take a look at the Site Rating of the webpage (as shown in the screenshots) :
Code:
http://www.urlvoid.com/scan/hd-plugin.com/
https://www.mywot.com/en/scorecard/www.hd-plugin.com

Hope you found this helpful in some way! :)
 

Attachments

  • Untitled.png
    Untitled.png
    12.8 KB · Views: 1,755
  • 2Untitled.png
    2Untitled.png
    58.4 KB · Views: 1,851
  • 3Untitled.png
    3Untitled.png
    15.8 KB · Views: 1,536

Gnosis

Level 5
Apr 26, 2011
2,779
I have fallen victim to this once before. Luckily it was just spamware and HiJackThis took care of most of it.
 

Gnosis

Level 5
Apr 26, 2011
2,779
Actually what I got hit with was on the front and center of and embedded media player. Soon as I clicked on it, it injected me with so much spam/crap. I sniffed it out quick, and nipped it in the bud.

On a related not, I tried out that tool Fiery has been using (adwCleaner)

Very nice.
 

jamescv7

Level 85
Verified
Honorary Member
Mar 15, 2011
13,070
Don't forget also that when you went from a unknown site and the Adblock Plus detected through your browser asked to turn off then better to stay away off, some legitimate ads site do this but it could do for malicious activities.
 

Littlebits

Retired Staff
May 3, 2011
3,893
These fake codec websites have been around for awhile, they come and go so fast that they are very hard to detect by most AV's. Some also will say your Adobe Flash Player needs to be updated, when you download the file then your are infected.

Just never download any file period from unknown sites.
MajorGeeks, Softpedia, FileHippo, DownloadCrew and SnapFiles have trusted files that they test for malware. Bookmark these download sites and when a website says you need a codec, Flash Player update, etc. go to your bookmarks and download the request files or updates.

Fake alert websites are responsible for most of the malware infection today.

If you need a video or audio codec then get K-lite Codec Pack from MajorGeeks because they always have the latest version.

Enjoy!!:D
 

Coffeeman

Level 3
Verified
Nov 24, 2012
202
This has gone online now, I remember when it was on torrents within some new movies. :) These guys were planting this type of codecs in dvdrip movies which we're just trailers:)
 

softwareFREEk

Level 1
Verified
Dec 27, 2012
621
Aussie PC Authority Mag site is very similar to downloadcrew.com
with latest downloads and editors choices :D

http://downloads.pcauthority.com.au/
 

Littlebits

Retired Staff
May 3, 2011
3,893
softwareFREEk said:
Aussie PC Authority Mag site is very similar to downloadcrew.com
with latest downloads and editors choices :D

http://downloads.pcauthority.com.au/

I believe both download sites are clones of each other. I don't know which one was first but both have the exact same reviewers, reviews, shotlights, giveaways, etc. This was the first time for me to visit pcauthority and I logged right on with my DownloadCrew user name and password.

All of my user commits and ratings from DownloadCrew was also automatically posted on pcauthority as well.

So I'm guessing that pcauthority must be an Australian version of DownloadCrew which is based in the UK. Both sites are about exactly the same.

Thanks.:D
 

softwareFREEk

Level 1
Verified
Dec 27, 2012
621
Littlebits said:
softwareFREEk said:
Aussie PC Authority Mag site is very similar to downloadcrew.com
with latest downloads and editors choices :D

http://downloads.pcauthority.com.au/

I believe both download sites are clones of each other. I don't know which one was first but both have the exact same reviewers, reviews, shotlights, giveaways, etc. This was the first time for me to visit pcauthority and I logged right on with my DownloadCrew user name and password.

All of my user commits and ratings from DownloadCrew was also automatically posted on pcauthority as well.

So I'm guessing that pcauthority must be an Australian version of DownloadCrew which is based in the UK. Both sites are about exactly the same.

Thanks.:D

yeah found the same some time ago mate
thanks for your share :D
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top