VCCodec/VideoCompressionCodec : ZLob/VirusBurster Installer

We have discovered a new ZLob/VirusBurster Installer:
http://superantispyware.blogspot.com

Nick Skrepetos
SUPERAntiSpyware.com
http://www.superantispyware.com
http://forums.superantispyware.com

 

At time of posting none of the antiviruses detects the installer (although Fortinet and Panda finds the file suspicious). After installing it, only a .tmp file and an .exe file are detected by Kaspersky ("not-virus:Hoax.Win32.Renos.dv" and "Trojan-Downloader.Win32.Adload.gw"). NOD32 performed better when scanning after having installed the "codec". NOD32 detected (amongst others) the VirusBurster program (NOD32 found 9 infected files in total), but missed the Trojan-Downloader that Kaspersky detected. AVG Anti-Spyware only detected the Hoax file.

EDIT: Also tried scanning with Virus Chaser (same engine as Dr.Web) and it found 0 infected files.

 

Don't forget that NOD32 blocks access to all websites with Zlob so you are virtually protected against all new variants (the url mentioned in the blog was blocked on the same day the new Zlob appeared on the web).

 

these Zlob-distributing websites change very fast. I had once about 7 different webpages. NOD32 is doing a good job blocking the url.