Hello
I've attached a list of domains who are hosting zlob codecs. I didn't checked them if they aren't already blocked by antivirus realtime protection when you surf the internet.
Thanks in advance for taking a look at it.
Best regards
Niels
/applications/core/interface/file/attachment.php?id=818" data-fileid="818" rel="">fake_codec_sites.txt
Thanks; they've been added to the tracking system.
Hello vlad
There is also another website who is hosting zlob codecs.I will post it also in this topic. I was only able to download 1 version I couldn't try to download others because that was denied from the server. But that sample wasn't detected yet. I've posted the direct download link. If needed I can upload the codec also.
/applications/core/interface/file/attachment.php?id=823" data-fileid="823" rel="">other_hosting_site.txt
More hosting sites.
/applications/core/interface/file/attachment.php?id=834" data-fileid="834" rel="">more_codec_zlob_hosting_sites.txt
Detection added as Trojan.Zlob.AQ. Thank you for the samples.
Best regards.
More zlob hosting sites. I've found also a site which lists new domains for zlob hosting or dns changer websites. I added the link also.
/applications/core/interface/file/attachment.php?id=844" data-fileid="844" rel="">zlob_hosting_sites.txt
The new samples are also already detected as Trojan.Zlob.AQ. Thank you for them.
