In the past three months or so, we have seen the increased propagation of malware that use codec download websites as their distribution vector. Commonly belonging to the family TROJ_ZLOB, these Trojans pose as legitimate codec installers, even going a step further to include a EULA to prove that they are legitimate applications. Users who are often victimized by such type of malware are those who want to watch a particular video but can’t do so with their current viewer because a codec is required. What happens next is obvious: they search for a codec using Google and end up installing a malware on their system instead.

Malware authors have taken advantage of the necessity of codecs to distribute and successfully install their creations on the users’ systems. Because of this, users who often watch video clips that require codecs would have to refrain from watching them for fear of installing something like TROJ_ZLOB. Security experts in the industry would often suggest that users be cautious in downloading and installing codecs.

But that is only a half-baked solution. The real solution to the problem is the elimination of the need for a codec. In short, the user’s video player should be able to support whatever codec the downloaded video requires so that he would never have to download one in the first place and risk the security of his system. Average users who are fond of watching videos often use Windows Media Player, which doesn’t always support new codecs. Therefore, what we need is a media player that can play the latest videos without the hassle of downloading and installing codecs.

The answer to our problem lies in VideoLAN VLC Media Player. This media player has been around for some time now but not a lot of users are familiar with it. In comparison to Windows Media Player, I’ve had the experience of watching something on VideoLAN that wouldn’t even play on the latter so I guess it’s more reliable than Windows Media Player. It’s also downloaded for free.

I’m not saying that it’s the best one available. VideoLAN might not be the only media player that can support a lot of codecs. There might be a whole lot more out there. My message is quite simple:if the video that you want to watch requires a codec, then find an alternative media player that allows you to play it without having to go through the hassle of installing an unknown codec that can put your system at risk.

Related Blog Entries

• A Trojan Codec and Two New Rogue Anti-Spywares (Ryan Flores, Nov 09, 2006)
  
• Where There Is Porn, There Are Zlobs (Jessie Paz, Oct 12, 2006)
  
• Browser as Major Distribution Vector for Malware (Jasper, Sep 15, 2006)
  
• CODEC-ted (Eric, Sep 08, 2006)