Thursday, July 31, 2008

Zlob

Zlob fake codec has been update. It drops the following file:

%SYSTEM%\jkqvjzl.dll

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{c96395b8-ab09-46a4-b539-7ddf6e061808}"="ceroxylon"

It also installs Toolbar, BHO, Antispycheck Rogue software...

SmitfraudFix removes the infection.