The organization(s) that are generating ZLob installer packages (well
known to be fake Codec
installers with Internet Domins with "codec" in the name) are
auto-generating numerous
variants. They are being generated faster than the AV companies are able
to create
signature files for. It took six weeks to get McAfee to recognize these
installers using
Heuristics as "New Malware N" and more specififically as "ZLob.dr". This
is a tough battle
that the AV companies are "just" starting to cope with.
