More fun scam sites touting fake codecs and the like.
New Zlob trojan fake codec sites
IP: 217.107.218.241
vaxcodec(dot)com
IP: 85.255.116.252
mediaobjectguide(dot)com
IP: 85.255.118.212
allsecuritylinks(dot)com
IP: 85.255.118.212
alltruesoftware(dot)com
New Trojan.DNSChanger (rootkit) sites:
IP: 69.50.170.102
accessvid(dot)net
IP: 69.50.170.102
siteentrances(dot)com
IP: 69.50.170.101
vids-access(dot) com
IP: 69.50.170.101
sites-entrance(dot)net
IP: 69.50.170.100
sites-entrance(dot)com
IP: 69.50.170.100
vidaccess(dot)net
IP: 69.50.170.99
playcodecs(dot)com
IP: 69.50.170.99
sitesentrance(dot)com
IP: 69.50.170.98
playerscodec(dot)com
IP: 69.50.170.98
site-entrance(dot)net
As you can see from our “chiclets” style graphics layout below, a number of these sites are virtually identical, except for a different name.
Obviously, please stay clear of these rogue sites and the malware they spawn. If you are infected, the latest version of CounterSpy (or the CounterSpy 2.0 beta) should remove them just fine.
Patrick Jordan and Alex Eckelberry
(With an additional hat tip to Suzi Turner)