Select Page

More fun scam sites touting fake codecs and the like.

New Zlob trojan fake codec sites

IP: 217.107.218.241           
vaxcodec(dot)com  

IP: 85.255.116.252 
mediaobjectguide(dot)com   

IP: 85.255.118.212 
allsecuritylinks(dot)com      

IP: 85.255.118.212 
alltruesoftware(dot)com       

New Trojan.DNSChanger (rootkit) sites: 

IP: 69.50.170.102   
accessvid(dot)net   

IP: 69.50.170.102   
siteentrances(dot)com        

IP: 69.50.170.101   
vids-access(dot) com            

IP: 69.50.170.101   
sites-entrance(dot)net         

IP: 69.50.170.100   
sites-entrance(dot)com       

IP: 69.50.170.100   
vidaccess(dot)net   

IP: 69.50.170.99    
playcodecs(dot)com           

IP: 69.50.170.99    
sitesentrance(dot)com        

IP: 69.50.170.98    
playerscodec(dot)com         

IP: 69.50.170.98    
site-entrance(dot)net

As you can see from our “chiclets” style graphics layout below, a number of these sites are virtually identical, except for a different name.            

1231299982434823488123410980980980981230987098709870987asdfws234827304987098sadlfasdfh1230987098asdfasdf123123898912398709asdfasdfhjkh12379871238080980afs9df8091823123kjksdjf12308098llllllllllllasdf12318999912399999123098sdfasdfklkjlkj1231230986546879879879876543546532132130098888888fdsdfsdf321657987dwfs635432165sdf1254654asdfsadf654879werwer3654328123198798asdf879182387dfscvsdf89

Obviously, please stay clear of these rogue sites and the malware they spawn. If you are infected, the latest version of CounterSpy (or the CounterSpy 2.0 beta) should remove them just fine.

Patrick Jordan and Alex Eckelberry
(With an additional hat tip to Suzi Turner)