The story continue… some days ago Sunbeltblog reported about fresh fake codec sites.
Codec is actually a trojan download installer, It will change your home page to one of the current security scam site used like iupdate.com. It produces unwanted popup to sell rough security software or open to porn content type pages like adultfriendfinders[dot]com.
The codecs also install one of the Anti-spyware rogues currently spywarequake and virusburst. They give false positives along with alert bubbles to scare users into buying their software which they own the online billing sites used so you would be giving your credit card number to the same people who infected you.
These sites:
IP: 85.255.118.195
vccodec(dot)com
IP: 69.50.188.109
hqcodec(dot)com
IP: 69.50.188.109
powercodec(dot)com
IP: 69.50.188.109
medcodec(dot)com
IP: 216.255.183.202
ptproject.com (currently offline)
All of these sites, except for ptproject(dot)com, have installers confirmed on their sites, even if the main page is not loading.
Related articles: How to remove malicious codecs.
