Sunbelt blog reported about some new fake codecs:
codechq – codechq(dot)net
Pushes both Windows and Mac TrojanDNSChanger. Sample binaries: Mac: codechq(dot)net/download/codechq(dot)dmg; Windows: codechq(dot)net/download/codechq(dot)exe.
vplprocedure – vplprocedure(dot)com
Sample binary vplprocedure(dot)com/download.php?id=10581
codectime – codectime(dot)com
Pushes both Windows and Mac TrojanDNSChanger. Sample binaries: Mac: codectime(dot)com(dot)/download/codectime(dot)dmg; Windows: codectime(dot)com(dot)/download/codectime(dot)exe
If you cannot remove fake codecs follow the steps in the topic Spyware removal – Read Before Posting.
