Saturday, September 13, 2008

IE Defender, Files Secure, Malware Bell, IE Antivirus, Total Secure 2009

IE Defender/Files Secure/MalwareBell/IE Antivirus/Total Secure 2009 Codec has been update, it installs a file with semi-random filename composed from a dictionary:
gc, lc, gx, pta, sto, ait

Possible filenames are:
gcpta.dll, gcsto.dll, gcait.dll, lcpta.dll, lcsto.dll, lcait.dll, gxpta.dll, gxsto.dll, gxait.dll

It displays alert messages with popups that download Total Secure 2009:

Use SmitfraudFix to remove the infection.