Another bogus Codec site

It seems like these guys setup a new bogus “codec” site every few days … however these new versions try to install themselves automatically … luckly IE7 stops this action, for now until they figure a way around it.



This new culprit is registered thru who else? … EstDomains/InterCage
tvscodec(dot)com = 216.255.182.171 which is registered to the same owner as:
tscodec(dot)com = 216.255.182.173


This one is not very well detected at the moment – VirusTotal results:


AntiVir 7.3.0.21 01.09.2007 TR/Drop.Zlob.acn
Authentium 4.93.8 01.10.2007  no virus found
Avast 4.7.892.0 12.30.2006  no virus found
AVG 386 01.10.2007 Downloader.Zlob.DEZ
BitDefender 7.2 01.11.2007 MemScan:Trojan.Dnschanger.V
CAT-QuickHeal 9.00 01.10.2007  no virus found
ClamAV devel-20060426 01.11.2007  no virus found
DrWeb 4.33 01.10.2007  no virus found
eSafe 7.0.14.0 01.10.2007 Win32.Zlob.acn
eTrust-InoculateIT 23.73.111 01.10.2007  no virus found
eTrust-Vet 30.3.3318 01.11.2007  no virus found
Ewido 4.0 01.10.2007  no virus found
Fortinet 2.82.0.0 01.10.2007  no virus found
F-Prot 3.16f 01.10.2007  no virus found
F-Prot4 4.2.1.29 01.10.2007  no virus found
Ikarus T3.1.0.27 01.09.2007  no virus found
Kaspersky 4.0.2.24 01.11.2007  no virus found
McAfee 4936 01.10.2007  no virus found
Microsoft 1.1904 01.11.2007  no virus found
NOD32v2 1971 01.11.2007  no virus found
Norman 5.80.02 01.10.2007  no virus found
Panda 9.0.0.4 01.10.2007  no virus found
Prevx1 V2 01.11.2007  no virus found
Sophos 4.13.0 01.10.2007  no virus found
Sunbelt 2.2.907.0 01.05.2007  no virus found
TheHacker 6.0.3.147 01.11.2007  no virus found
UNA 1.83 01.10.2007  no virus found
VBA32 3.11.2 01.10.2007  no virus found
VirusBuster 4.3.19:9 01.10.2007 Trojan.DR.Zlob.Gen!Pac14



Leave a Reply