Wednesday, July 2, 2008

Zlob

Zlob fake codec has been update. It drops the following file:

%SYSTEM%\blbpeoy.dll

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{ecc974ae-6ede-44a2-90da-93b996d8eaf8}"="frizzed"

It also installs Toolbar, BHO, Antispycheck Rogue software...

SmitfraudFix removes the infection.