New version of JS/Nuven?

[Duh_OZ]

From a SPAM link(broken into 2 lines):
hxxp://xxx.videoaxdownload.
com/download.php?id=446

Submitted to VirusTotal, just one vendor flagged it:
eTrust-Vet 30.8.3777 07.10.2007 JS/Nuvens

 

[Duh_OZ]

hxxp://xxx.videoaxdownload.
com/download.php?id=446

Submitted to VirusTotal, just one vendor flagged it:
eTrust-Vet 30.8.3777 07.10.2007 JS/Nuvens

=========
Never mind - just another Zlob - must have been a bad download the
first time as I tried it again and got the standard Zlob ID's.

 

[David H. Lipman]

From: "Duh_OZ" <[email protected]>

|
| =========
| Never mind - just another Zlob - must have been a bad download the
| first time as I tried it again and got the standard Zlob ID's.

Yepper. Either ZLob or DNSChanger.

Registration Service Provided By: ESTDOMAINS INC
Contact: +1.3027224217
Website: http://www.estdomains.com

Domain Name: VIDEOAXDOWNLOAD.COM

Registrant:
PrivacyProtect.org
Domain Admin ([email protected])
P.O. Box 65
All Postal Mails Rejected, visit Privacyprotect.org
Monster
null,2680 AB
NL
Tel. +45.36946676

Creation Date: 06-Jul-2007
Expiration Date: 06-Jul-2008