New Zlob trojan fake codec sites
IP: 85.255.116.254
objectactivex(dot)com
IP: 85.255.116.253
imagemediaobject(dot)com
IP: 69.50.188.105
activexsource(dot)com
Bonus! Another sleazy security scammer:
IP: 85.255.116.212
topsecuritypage(dot)com
Obviously, please stay clear of these rogue sites and the malware they spawn. If you are infected, the latest version of CounterSpy (or the CounterSpy 2.0 beta) should remove them just fine.
Patrick Jordan and Alex Eckelberry