A new approach from the Codec gang
Landing on the following site you'll see the (bogus) message ... "may require special application to run" ... yeah right!

Scanning at VirusTotal: Result: 10/32 (31.25%) = Trojan.Win32.DNSChanger.qb ... sadly this is better than usual ... vivacodec is hosted at Cernel, which hosts about 90% of the codec sites.