Fake codecs typically push for a special “Active X” or “Codec” install.
Here’s one trying to tell the user they are missing Flash. Notice how convincing it is:
What’s actually pushed is the trojan MediaTubeCodec.
(In case you’re wondering, Flash is certainly installed on that system.)
Alex Eckelberry
(Thanks, Patrick Jordan)