Avoid these like the plague.
IP: 85.255.118.214
checkssecurity(dot)com
cleansoftwares(dot)com
protectionszone(dot)com
entertainingzone(dot)com
outgates(dot)com
atruesecurity(dot)com
atotalsafety(dot)com
IP: 85.255.118.244
allprotections(dot)com
All of these sites are using a zlob trojan installed from vaxobject(dot)com.
And avoid this new fake codec, vaxobject (Video Access ActiveX Object). It’s spyware.
IP: 69.50.188.100
vaxobject(dot)com
Patrick Jordan and Alex Eckelberry