W32/GetCodec-A is a worm for the Windows platform.
When run, the worm sets the following registry entries:
HKCU\Software\Microsoft\PIMSRV\
HKCU\Software\Microsoft\MediaPlayer\Preferences\
URLAndExitCommandsEnabled
0
HKCU\Software\Microsoft\MediaPlayer\Player\Extensions\.mp3\
Permissions
33
The worm has the functionalities to:
- Search the infected computer for files with the extension of .mp3, .wmv, .wma .mp2 and .mp3
- Convert the located files to wma format without modifying the original filename and extension
- Insert the functionality to download code from a remote website into the converted wma format files.