We used to see a Lot of fake codecs that were actually nasties, about 10 years ago. Well it's happening again ! Not only that, but the same gang that are still trying the fake support tricks. hxxp://www.kernelmode.info/forum/viewtopic.php?f=16&t=4421&sid=6f81626cd85509875113e7ba113b61e2
This malware is Winlocker.VB6.Blacksod Latest link now involves several different tricks, including a redirect to hxxp://nullrefer.com/?hxxp://vmcmediaplayer.com - hxxp://cpaupload.com http://thebot.net/threads/hexacash-com-biggest-scam-website.354917 & http://wpmethod.blogspot.co.uk/2016/04/make-over-1000-with-cpaupload-get-paid.html
