Fake codec with a twist

These codec sites have a new twist … they are now displaying the typical fake codec message from Windows Media Player.


 


However this new version automaticall redirects the viewer and the Trojan.Zlog file is automatically loaded …



This new (fake) codec site was only registered Dec. 11 and I’ve found about 60 (adult) sites already using it …
NOD32 detects the download as: Win32/Small.FB trojan



Leave a Reply