某近期热门电影，AVI格式，近1GB，下载好了后播放出现一个十几秒的画面，并且有一行字Codec Error: Use Windows Media Player，稍后出现Aborting Video, Redirecting to Microsoft Codec Download Page，我没有用WMP播放，当我改用WMP播放时，弹出一个浏览器窗口，貌似所指向的网站没能打开，我看了下网址不是Microsoft的，所以判断前面画面的说明是骗人的，那这究竟是怎么回事呢？
我搜索了网络，找到这么一个帖子《Codec Error: Use Windows Media Player》。其中摘录VLC_help所提到“You have downloaded trojan videos. I would suggest removing them and doing virus and spyware scans to your computer.”，以及Lotesdelere所提到“These videos are ‘hacked’ videos that contain scripts which can be executed by WMP only. The purpose of this is to force you to be redirected to another site and/or to download some stuff in the background.If you can’t play them in WMP then it’s a good sign meaning that your Windows and WMP are correctly patched with the latest security updates.Anyway you should delete these videos as soon as possible because they may compromise the security of your computer if they are played in WMP.”
意思很明显了，这是个植入了木马脚本的视频，因为相关木马窗口只有使用Windows Media Player播放时才会弹出来，而木马即是所谓的“解码器”，诱导用户下载并执行，我后来用杀毒软件一扫描，果然判断是病毒并自动删除了。
最后批评下某杀毒软件，反应能力这么弱，我不扫描还检测不出来，还好那木马网站被屏蔽了，当然即使木马网站能打开我也不会去下载滴，因为不像是微软网站的风格嘛:-)