[Michael]

thetubeamps.com pushes a fake codec:



Other domains on this IP*64.20.38.172:

dipexe.com

exe-direct.com

exe-get.com

exe-online-world.com

exe-paste.com

exe-porto.com

exe-site.com

exefileformat.com

exenetsfiles.com

eyeexe.com

freeexefiles.com

hotexefiles.com

my-exe-load.com

newexefile.com

red-exe.com

robo-exe.com

soft-exe.net

the-exefiles.com

tiaexe.com

VirusTotal detection is poor 3/41



Jerome Segura

Malware ID:*a36a4e12a3e3e3a3bf32a52d33a1ccb3.zip