Jump to content


Rootkit Changes Search Results


2 replies to this topic

#1 OFFLINE   Humpty

    Super Hero

  • Members
  • PipPipPipPipPip
  • 2,125 posts

Posted 05 September 2006 - 12:29 AM

Quote:

The new exploit pretends to be one of the many free video codecs found on the Web, which enable end users to view digital video and audio in a faster, compressed format. But when they click on the software and pull up the license agreement, users find that the software has already been installed on their computers.

Article

#2 OFFLINE   Eldmannen

    Annoyance

  • Banned
  • PipPipPipPipPip
  • 2,198 posts
  • Location:Internet
  • Interests:Free software, open-source, GNU GPL, Linux, security, encryption, privacy, anonymity.

Posted 05 September 2006 - 02:30 PM

Someone speculated this was a move by the MPAA (Movie Picture Ass. of America).



#3 OFFLINE   TonyKlein

    Power Member

  • Spyware Moderators
  • 606 posts
  • Gender:Male
  • Location:Netherlands

Posted 05 September 2006 - 03:33 PM

This is merely one of the myriad incarnations of the same pest; previous ones have been called newvidscodec, emcodec, emediacodec, media-codec, nvidcodec, v-codec, vicodec, mediacodec, pornmagpass, digipassword, xpasswordmanager, pcodec.

All spread via adult sites prompting you to download a 'missing codec' or 'software key' required to view their content and so on...

In fact all of these are detected as variants of the Zlob aka Puper or FakeAle trojan, downloaders that prompt you to install one of the many rogue 'spyware removers' such as SpyAxe, SpywareStrike, SpyFalcon, Winantivirus and many other clones...