Zlob fake codec has been update. It drops the following file:
%SYSTEM%\ebmkdz.dll
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{6b9a461b-893f-45ee-8c59-06d3a2223b24}"="cypselomorphae"
It also installs Toolbar, BHO, Virus Response Lab 2009 software...
SmitfraudFix removes the infection.