Trojan.Downloader.WMA.Wimad

While accessing the “.wma” which is a media file extension the following behavior is noticed :

A. A browser page opens to a certain webpage ( ie missing-codecs.com or fastmp3player.com)

B. It tries to download and execute (when the user hits run on IE ) a malware from the mentioned site.

C. The prompted file to download is named “Codec.exe” which has the Windows Media Player  icon (the name could vary (“PLAY_MP3.exe” or another).

Find out more about symptoms, tehnical description and removal instructions here.