Is it spyware/malvare masked in .avi?

[Aleksandar]

Here's a strange thing (never happened to me before).

I have downloaded a torrent file (.avi - 700MB). It lasts 4 seconds and it says "use windows media player".

Ok, I use WMP, same thing and then it forwards me automatically to http://microsoftmediaplayer.net/pluginerror/

This site is a joke, even when I remove the "pluginerror" from the url it forwards me again. It's a scam I'm 99% sure but then again how could WMP launch my browser and put this url automatically? I guess it's contained somewhere in the file. Which brings us to the next thing:

After launching the file, WMP is giving me "File extension doesn't suit the file format". So basically I'm thinking someone planted this ".avi" file that "requires" new codecs and somehow it forwards you to the scammy looking site to download your "updates".

So I was thinking "WTF they can do this too? Trick the player to give you some credibility (hey, the player got you there so it must be legit don't worry) and make you download their spyware/malvare" or whatever it is, I won't find out that's for sure..

What do you think?

 

[Biggie]

from whois.sc:

Domain Name: MICROSOFTMEDIAPLAYER.NET
Created on: 29-Dec-09
Expires on: 29-Dec-10
Last Updated on: 15-Jan-10


that should tell you something

 

[Aleksandar]

"a domainer's answer"

yep, you're right, I should've checked that first.