x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

WmvDown.A

Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:WmvDown.A
Technical name:Trj/WmvDownloader.A
Threat level:Low
Type:Trojan
Effects:  

It downloads and installs malware in the affected computer.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

First detected on:Jan. 10, 2005
Detection updated on:Jan. 11, 2005
StatisticsNo

Brief Description 

    

WmvDown.A is a Trojan that downloads and installs malware in the affected computer:

  • Other Trojans: Downloader.GK, etc.
  • Spyware programs: AdClicker, BetterInet, ISTbar, Dluca, etc.
  • Adware programs: Funweb, MydailyHoroscope, MyWay, MyWebSearch, Nsupdate, PowerScan, Twain-Tech, Sidefind, etc.
  • Dialers: Dialer.NO, Dialer.YC, etc.

WmvDown.A takes advantage of a technology of Microsoft's Windows Media Player, called Windows Media Digital Rights Management (DRM). This technology has been developed in order to protect multimedia content that holds intellectual rights.

This Trojan reaches the computer in a license-protected multimedia file. When the user attempts to view it, WmvDown.A connects to an URL in the domain serve.alcena.com and downloads malware to the computer.

Visible Symptoms 

    

WmvDown.A is easy to recognize once it is run, as it connects to the Internet and seemingly attempts to obtain a so-called license for a multimedia file.

When the license is supposedly obtained, WmvDown.A displays the message below: