Pushes both Windows and Mac TrojanDNSChanger.
Sample binaries: Mac: playcodec(dot)net/download/playcodec4327(dot)dmg; Windows: playcodec(dot)net/download/playcodec(dot)exe. If you are hunting for Mac fake codecs, remember to change your user agent to a Mac. And please — don’t touch these binaries unless you know what you’re doing, as they are live Trojans.
Incidentally, one site doing a good job of keeping up with fake codecs is http://peki.blogspot.com/.
Alex Eckelberry
(Thanks Bharath)