Thursday, August 14, 2008

IE Defender, Files Secure, Malware Bell, IE Antivirus

IE Defender/Files Secure/MalwareBell/IE Antivirus Codec has been update, it installs a file with semi-random filename composed from fragment words: srch, sr, search, add, addon, a

Possible filenames are: srchadd.dll, srchaddon.dll, srcha.dll, sradd.dll, sraddon.dll, sra.dll, searchadd.dll, searchaddon.dll, searcha.dll.

This dictionary is the same as the one in the previous post. The dropper has been updated but it still not save the new resource.

It displays alert messages with popups that download IE Antivirus:


Use SmitfraudFix to remove the infection.