Zlob Trojan Distributing sites
Site Name: Viewmpgdevice.com
IP Address: 85.255.120.106
Site Name: Aviadaptation.com
IP Address: 85.255.118.181
As usual the site registrants for both the sites are ESTDOMAINS, INC. The installer from these sites were scanned and here are the results:
VirusTotal Scan Result: 10/32 (31.25%)
AntiVir 7.6.0.73 2008.03.04 DR/Zlob.Gen
AVG 7.5.0.516 2008.03.03 Downloader.Zlob.ABR
BitDefender 7.2 2008.03.04 Trojan.Downloader.Zlob.ABLJ
ClamAV 0.92.1 2008.03.04 Trojan.Dropper-2529
DrWeb 4.44.0.09170 2008.03.04 Trojan.Popuper.5238
Ikarus T3.1.1.20 2008.03.04 Trojan-Downloader.Zlob.ABLJ
Microsoft 1.3301 2008.03.03 TrojanDownloader:Win32/Zlob
VBA32 3.12.6.2 2008.02.27 suspected of Downloader.Zlob.3
VirusBuster 4.3.26:9 2008.03.03 Trojan.DR.Zlob.CKW!Pac
Webwasher-Gateway 6.6.2 2008.03.04 Trojan.Dropper.Zlob.Gen
Stay away from these sites.
Bharath M N
