VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\xdsfqroe???.dll (where ? is a random caracter)
%WINDOWS%\mstoanrd.dll
%WINDOWS%\mqxvbdwk.dll
%WINDOWS%\fweqsvxo.dll
%WINDOWS%\nefstqdr.exe
%WINDOWS%\e???.exe (where ? is a random caracter)

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\rsdgbtkq???.dll (where ? is a random caracter)
%WINDOWS%\wvfsrqab.dll
%WINDOWS%\wfexqnrp.dll
%WINDOWS%\wvbegpqs.dll
%WINDOWS%\emnvoqgx.exe
%WINDOWS%\e???.exe (where ? is a random caracter)

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC) + Total Secure 2009 (IEDef)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\aetlsrkn???.dll (where ? is a random caracter)
%WINDOWS%\bkqxdons.dll
%WINDOWS%\qnflkotm.dll
%WINDOWS%\vwnskbot.dll
%WINDOWS%\woprdagt.exe
%WINDOWS%\e???.exe (where ? is a random caracter)



This infection installs Total Secure 2009 Rogue, which drops an IEDef infection:
%WINDOWS%\sysbase32.dll

VideoAccessCodec (VAC), Desktop Hijack

The new version of Video Access Codec infection installs a new Wallpaper on the desktop.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\nkefbltd???.dll (where ? is a random caracter)
%WINDOWS%\dkwqgnbe.dll
%WINDOWS%\neksolda.dll
%WINDOWS%\xgpsarbm.dll
%WINDOWS%\fkebanrw.exe
%WINDOWS%\e???.exe (where ? is a random caracter)

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\dfmlxbpk???.dll (where ? is a random caracter)
%WINDOWS%\peltodgx.dll
%WINDOWS%\rwlfsdmk.dll
%WINDOWS%\onfwbsak.dll
%WINDOWS%\fbxrqtwn.exe
%WINDOWS%\e???.exe (where ? is a random caracter)

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\vmgspntb???.dll (where ? is a random caracter)
%WINDOWS%\fqbewlna.dll
%WINDOWS%\mgxfebsq.dll
%WINDOWS%\dtseqrxk.dll
%WINDOWS%\mqgldfvo.exe
%WINDOWS%\e???.exe (where ? is a random caracter)

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\rodqgpvl???.dll (where ? is a random caracter)
%WINDOWS%\qalkfxor.dll
%WINDOWS%\pdoskegl.dll
%WINDOWS%\rqbmvpso.dll
%WINDOWS%\rvoelbxt.exe
%WINDOWS%\e???.exe (where ? is a random caracter)

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\mesdxbr???.dll (where ? is a random caracter)
%WINDOWS%\vwsrfton.dll
%WINDOWS%\wbqxfpgl.dll
%WINDOWS%\tpabfelq.dll
%WINDOWS%\ateqoflr.exe
%WINDOWS%\e???.exe (where ? is a random caracter)

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\ksendlbt???.dll (where ? is a random caracter)
%WINDOWS%\vrmdtneg.dll
%WINDOWS%\xvorfwbd.dll
%WINDOWS%\wpvmqosg.dll
%WINDOWS%\neltabxw.exe
%WINDOWS%\e???.exe (where ? is a random caracter)

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\nogxfvbl???.dll (where ? is a random caracter)
%WINDOWS%\nmwegbsf.dll
%WINDOWS%\adgpfoxs.dll
%WINDOWS%\erpobmsw.dll
%WINDOWS%\xbqmfsed.exe
%WINDOWS%\e???.exe (where ? is a random caracter)

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\boqnrwdm???.dll (where ? is a random caracter)
%WINDOWS%\atfxqogp.dll
%WINDOWS%\vltdfabw.dll
%WINDOWS%\vregfwlx.dll
%WINDOWS%\xmpstean.exe
%WINDOWS%\eqln.exe

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC), Virus Alert!

The new version of Video Access Codec infection installs some policies that prevent Command Line execution.

It also displays a message: Virus Alert! in the Windows Clock, removes some Start Menu icons, and hides drives icons.



Use SmitfraudFix to remove the infection.

Zlob, VideoAccessCodec (VAC)

Websites proposing malware installation under fake codec message have seen an evolution, according to Secure Computing, Zlob threat hides as free, faked MP3 download.

VideoAccessCodec fake messages content have also changed, proposing a Fake Flash installation:



Thanks to MAD.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\fvowketq???.dll (where ? is a random caracter)
%WINDOWS%\pvnsmfor.dll
%WINDOWS%\mpfanvqg.dll
%WINDOWS%\vbksrofa.dll
%WINDOWS%\oadkxrts.exe
%WINDOWS%\epfg.exe

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\gndarmbl???.dll (where ? is a random caracter)
%WINDOWS%\wxdbpfvo.dll
%WINDOWS%\qadovnel.dll
%WINDOWS%\bdkpfxqw.dll
%WINDOWS%\spwoqbmv.exe
%WINDOWS%\xbaqktfv.exe

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\qnmargol???.dll (where ? is a random caracter)
%WINDOWS%\dpevflbg.dll
%WINDOWS%\vadokmxt.dll
%WINDOWS%\wdpoefan.dll

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\lgmxvpat???.dll (where ? is a random caracter)
%WINDOWS%\qtvglped.dll
%WINDOWS%\pmsoarbf.dll
%WINDOWS%\omlbpkaw.dll

Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\nslbvxpg???.dll (where ? is a random caracter)
%WINDOWS%\sgoblxtm.dll
%WINDOWS%\ogxtsepr.dll
%WINDOWS%\dsktbwfe.dll

SmitfraudFix removes the infection.

VideoAccessCodec (VAC)

VideoAccessCodec (aka VAC, VideoCach, MediaTubeCodec, Media Codec Software, Video ActiveX Codec) is installed from web sites proposing video and a codec (trojan) installation.



It installs a toolbar in Internet Explorer:


and displays fake IE alert bars, linking to rogues: