FakeCodec.100

Aliases:	TR/Crypt.XDR.Gen (Antivir), Trojan-Downloader.Win32.Zlob.bxr (Ikarus)
Date added:	2007-10-16

Details

Related files:

• codec_setup.exe
• pxmon32.exe
• WinPerformance.exe

This trojan poses as a video codec installer, under the pretense that it is needed to play back certain video files. In reality, the file is a trojan which will download other trojan and adware files. The trojan downloads and installs "Windows Performance" which displays "problems found" messages and urges the user to purchase the program to fix the problems.

Removal

Delete these registry keys:

• HKEY_CLASSES_ROOT\SecMediaOnline

Delete these files:

• codec_setup.exe
• pxmon32.exe
• WinPerformance.exe

Also delete the folder C:\Program Files\WinPerformance, if it exists.