IE Defender, Files Secure, Malware Bell, IE Antivirus

IE Defender/Files Secure/MalwareBell/IE Antivirus Codec has been update, it installs files with semi-random filenames, composed from fragment words: one, ssva, uno, nas, p, k, ek, ad, us

Files could look like: unopus.dll...

and displays alert messages:


Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\gndarmbl???.dll (where ? is a random caracter)
%WINDOWS%\wxdbpfvo.dll
%WINDOWS%\qadovnel.dll
%WINDOWS%\bdkpfxqw.dll
%WINDOWS%\spwoqbmv.exe
%WINDOWS%\xbaqktfv.exe

Use SmitfraudFix to remove the infection.

Zlob

Zlob fake codec has been update. It drops the following file:

%SYSTEM%\uyhjw.dll

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{4d51e91c-e917-4b7f-89ff-abe471e16927}"="enswathes"

It also installs Toolbar, BHO, VirusHeat Rogue software...

SmitfraudFix removes the infection.

Zlob

Zlob fake codec has been update. It drops the following file:

%SYSTEM%\zfaiqwr.dll

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{b0fdc513-46b9-46fc-8e70-d575ee546dae}"="frowardness "

It also installs Toolbar, BHO, VirusHeat Rogue software...

Use SmitfraudFix to remove the infection.

IE Antivirus

A new Rogue has been released: IE Antivirus.
This rogues looks like: IE Defender, Files Secure, Malware Bell.



SmitfraudFix removes the infection.

IE Defender, Files Secure, Malware Bell

IE Defender/Files Secure/MalwareBell Codec has been update, it installs files with semi-random filenames, composed from fragment words: k, w, z, o, so, onsa, l, na, rad

Files could look like: zsol.dll, wol.dll...

and displays alert messages:


SmitfraudFix removes the infection.

Zlob

Zlob fake codec has been update. It drops the following file:

%SYSTEM%\rkaxfza.dll

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{eb9f614b-ea44-40d0-8829-542e4f254739}"="garcea"

It also installs Toolbar, BHO, VirusHeat Rogue software...

Use SmitfraudFix to remove the infection.

IE Defender, Files Secure, Malware Bell

IE Defender/Files Secure/MalwareBell Codec has been update, it installs files with semi-random filenames, composed from fragment words: t, p, z, o, so, onsa, kr, pl, dnr, u, y, e

Files could look like: ponsadnru.dll, ponsaple.dll, tsoply.dll, zople.dll...

and displays alert messages:


Use SmitfraudFix to remove the infection.

VideoAccessCodec (VAC)

VideoAccessCodec has been update, it installs the following files:

%WINDOWS%\qnmargol???.dll (where ? is a random caracter)
%WINDOWS%\dpevflbg.dll
%WINDOWS%\vadokmxt.dll
%WINDOWS%\wdpoefan.dll

Use SmitfraudFix to remove the infection.

IE Defender, Files Secure, Malware Bell

IE Defender/Files Secure/MalwareBell Codec has been update, it installs files with semi-random filenames, composed from fragment words: ol, si, un, ad, on, id, a, e, y, 16, 32, 64

Files could look like: unady64.dll

and displays alert messages:


Use SmitfraudFix to remove the infection.