Sunbelt blog reported about some new fake codecs: codechq – codechq(dot)net Pushes both Windows and Mac TrojanDNSChanger. Sample binaries: Mac: codechq(dot)net/download/codechq(dot)dmg; Windows: codechq(dot)net/download/codechq(dot)exe. vplprocedure – vplprocedure(dot)com Sample binary vplprocedure(dot)com/download.php?id=10581 codectime – codectime(dot)com Pushes both Windows and Mac TrojanDNSChanger. Sample binaries: Mac: codectime(dot)com(dot)/download/codectime(dot)dmg; Windows: codectime(dot)com(dot)/download/codectime(dot)exe If you cannot remove fake codecs follow the steps in the