From: "Dustin Cook" <spamfilterineffect.see.sig@nowhere.com>


| Yes... which leads me to believe it's from central source code, modified
| just enough to pass thru scanners...
|
| Spyware spreads better than any virus I know of at this point.... Which is
| very depressing.
|

Yes. The vast majority of web sites are registered by ESTDomains. New web sites are
created weekly as well as new variants. Every several weeks or so web sites are shutdown.
Every several weeks or so there is a major shuift in the motive operandi. The files cahnge,
their associated icons and their stated purpose. For example one big campaign was "codec"
and aother "site tickets" while another is "Video ActiveX (VAX)".

It should be noted that they are not just producing ZLob Trojans but DNSChanger Trojans.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm