Home / malware

PDF

Trojan.HTML.Zlob.W

First posted on 21 November 2011.
Source: BitDefender

Aliases :

Trojan.HTML.Zlob.W is also known as Trojan.Popuper, Trojan.Zlob, Win32/TrojanDownloader.Zlob, MalwareScope.Downloader.Zlob.1.

Explanation :

This malware is a part of a web page that asks a download of a certain codec or ActiveX component that supposedly helps viewing the content of a video file.

It has the following behavior :

receiving messages from your browser : "Video ActiveX Object Error. Your browser cannot play this video file.Click 'OK' to download and install missing Video ActiveX Object." when you try to view video files. If the user cancels the request then he receives, in a loop, this message : "Please install new version of Video ActiveX Object."Then it gives you a download to install on the computer. Usually this is "ActiveX" related or "video codecs" related.The links that keep the download change rapidly and they usually contain reference to codecs : VideoAccessCodec, VideoSoftOnline, CodecPro, VipCodecVip, IXCodec, MoonCodec , or to video enhancers: VideoAdaptation, SoftWebVideo.When given the approval and installed the malware takes these steps ( http://www.bitdefender.com/VIRUS-1000125-en--Trojan.Zlob.2.Gen.html )

Last update 21 November 2011

 

TOP