The threat talked about here is real and bad, I agree that users will be users and most will not recognize the threat. Another problem I see here is the number of names used for the same threat. Three vendors were listed, three different names were lsited: Trend Micro calls the malware "Troj_Medpinch.a," Secure Computing named it " "Trojan.ASF.Hijacker.gen" and Kaspersky calls it "Worm.Win32.GetCodec.a." What Does Sophos, et al call it? Talk about Trend Micro calls the malware "Troj_Medpinch.a," Secure Computing named it " "Trojan.ASF.Hijacker.gen" and Kaspersky calls it "Worm.Win32.GetCodec.a." Talk about Babylon! EICAR had an effort underway in the 90's to come up with common naming standards, what happened to that?

Click to read the article this is in response to.