W32/GetCodec-A

Category: Viruses and SpywareProtection available since:14 Oct 2009 16:49:13 (GMT)
Type: Win32 wormLast Updated:07 Nov 2010 01:34:20 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/GetCodec-A is a worm for the Windows platform.

When run, the worm sets the following registry entries:

HKCU\Software\Microsoft\PIMSRV\

HKCU\Software\Microsoft\MediaPlayer\Preferences\
URLAndExitCommandsEnabled
0

HKCU\Software\Microsoft\MediaPlayer\Player\Extensions\.mp3\
Permissions
33

The worm has the functionalities to:

 - Search the infected computer for files with the extension of .mp3, .wmv, .wma .mp2 and .mp3
- Convert the located files to wma format without modifying the original filename and extension
- Insert the functionality to download code from a remote website into the converted wma format files.