sharpy merc
join:2003-01-28
England
| Vodei Codec - Delayed malware?
I downloaded a video yesterday.
On trying to play it , I was directed to a site to get a codec.
Now I'm a regular here so I became suspisious. I did a search on the Vodei codec and found quite a lot of conflicting data.
So I'm asking anyone had any dealings with this Codec?
Mind you some of the stuff I have found , had one effect I deleted the file. |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
| It's a good thing to verify when asked to download a codec these days as this is often a ploy used by the Zlob/Smitfraud pest and quite frequently people are fooled by it.
»Beware Fake Codecs - it could be a trojan
This doesn't appear to be one of those, and it scans clean at Jotti's (using the codec provided on their site - this doesn't confirm any other copy, but that one passes as clean anyway)
However, a little investigation reveals it might be something other than expected. There are some comments made at the Site Advisor review for this codec here:
»www.siteadvisor.com/sites/vodei.com/
(see the comments section by those who have downloaded it)
There are, of course, legitimate codecs out there as well, but it is always a good thing to investigate to be sure. 
It the one you have the same MD5 as this sample I just scanned?
quote:
Jotti Malware Scan
Service load:
0% 100%
File: VodeiSetup200.exe
Status:
OK(Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 61b11b24ca8856d889c369267e24353f[
Hmmm, re-reading your post it looks like you deleted it so my last question may not apply.
--
It takes a disaster to make a woman out of a femaleMicrosoft MVP/Windows Security 2003-2007Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
sharpy merc
join:2003-01-28
England | reply to sharpy merc
Thanks on the quick response CJ.
Think I'll pass on this one for now.
Many thanks again. |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL | You're welcome! |
|
bobince
join:2002-04-19
DE
| reply to sharpy merc
Malware hasn't been found in it, but it's still a scam. After a while it will start bugging you to pay to 'register' it.
The trick is, it isn't a codec at all, but a hack to make AVI files not play if the software isn't loaded. The company behind it rips commercial films, encodes them using a normal codec (which you will also need to play the file - typically an MPEG-4 ASP variant such as DivX, Xvid, ffmpeg), then corrupts them so that only their software can fix and play them, and distributes on P2P outlets such as a torrent tracker they appear to be running themselves. |
|
sharpy merc
join:2003-01-28
England | Thanx for the details on this scamming Non-Codec. Bobince I shall stay well away from such encoded files. |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
edit:
April 16th, @06:01PM
| reply to sharpy merc
They "say" that it's packing in a better way... Loosing less quality...back in 2005 all you could find was a few porn video that used it when beta..but now it seems to be more prevalent..and I would assume they are legit.
Here is there FAQ
»vodei.com/faq.html
My rule of thumb still stands..if I do not already have the codec needed to view anything on the net..then I certainly do not need any new one..and i would never trust any site to offer it just before i tried to view any thing.
--
Gladiator Security Forum »www.gladiator-antivirus.com/
Missing Kids
»www.missingkids.com/ |
|
